CVE-2025-31285 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create users who…
Medium CVSS: 4.6

CVE-2025-31285

A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges.

Please note: ths issue has already been addressed on the backend service and is no longer considered an active vulnerability.
Vendor
Trendmicro
Product
Trend Vision One
CWE
CWE-269
Yayın Tarihi
2025-04-02 17:15:48
Güncelleme
2025-09-02 18:33:05
Source Identifier
security@trendmicro.com
KEV Date Added
-

Kategoriler

Referanslar