Trend Micro Trend Vision One Broken Access Control Vulnerability Allowing Privilege Escalation

A broken access control vulnerability in the Trend Vision One User Account component could have permitted an administrator to create users who could subsequently alter account roles and escalate privileges. This issue has been resolved on the backend service and is no longer active.

Impact

Exploitation of this vulnerability could have led to unauthorized privilege escalation by allowing users to change account roles and gain elevated rights.