Trend Micro Trend Vision One User Roles Component Broken Access Control Vulnerability
Vulnerability
A broken access control vulnerability in the Trend Vision One User Roles component could have allowed an administrator to create users who could then modify account roles and escalate privileges. This issue has been addressed on the backend service and is no longer active.
Impact
Exploitation of this vulnerability could have led to unauthorized privilege escalation by allowing users to change roles and gain elevated access rights.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
5.2remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.