Trend Micro Trend Vision One Broken Access Control Vulnerability Allowing Privilege Escalation

A broken access control vulnerability in the Trend Vision One Status component could have allowed an administrator to create users with the ability to change account roles and escalate privileges. This issue has been addressed on the backend service and is no longer active.

Impact

Exploitation of this vulnerability could have led to unauthorized privilege escalation by allowing users to change account roles and gain elevated rights.