Trend Micro Trend Vision One Broken Access Control Vulnerability Allowing Privilege Escalation

A broken access control vulnerability in the Trend Vision One Role Name component could have permitted an administrator to create users with the ability to modify account roles, leading to unauthorized privilege escalation. This issue has been resolved on the backend service and is no longer active.

Impact

Exploitation of this vulnerability could have allowed for unauthorized privilege escalation by manipulating user roles.