AssetView vulnerable to incorrect permission assignment for critical resource

{
  "id": "302982f0162d1055e6804ffb73fe85a86ea6379001d5225170fc0a55ff6858de",
  "url": "https://jvn.jp/en/jp/JVN38664315/",
  "method": "llm",
  "payload": {
    "kind": "advisory",
    "title": "AssetView vulnerable to incorrect permission assignment for critical resource",
    "summary": "AssetView products contain an incorrect permission assignment vulnerability that may allow a local attacker who can log in to the Windows system running the Management Console or Client Terminal to gain SYSTEM privileges. The notice recommends updating the software or contacting the developer for support.",
    "evidence": "An attacker who can log in to the Windows system where Management Console or Client Terminal for the product is running may gain SYSTEM privileges.",
    "products": [
      {
        "name": {
          "value": "AssetView",
          "evidence": "AssetView versions prior to Ver 13.2.7B"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions prior to Ver 13.2.7B",
            "evidence": "AssetView versions prior to Ver 13.2.7B"
          }
        ]
      },
      {
        "name": {
          "value": "AssetView CLOUD",
          "evidence": "AssetView CLOUD Versions prior to Ver 13.2.7B (13.2 series)"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "Versions prior to Ver 13.2.7B (13.2 series)",
            "evidence": "AssetView CLOUD Versions prior to Ver 13.2.7B (13.2 series)"
          },
          {
            "value": "Versions prior to Ver 13.3.7 (13.3 series)",
            "evidence": "Versions prior to Ver 13.3.7 (13.3 series)"
          }
        ]
      },
      {
        "name": {
          "value": "AssetView Cloud +",
          "evidence": "AssetView Cloud + versions prior to Ver 2600.201.11"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "versions prior to Ver 2600.201.11",
            "evidence": "AssetView Cloud + versions prior to Ver 2600.201.11"
          }
        ]
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [
      {
        "value": "CVE-2026-101020",
        "evidence": "CVE-2026-101020"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-jvn-english",
  "document_id": 23860,
  "published_at": "2026-10-13T03:00:00+00:00"
}