CVE-2025-31284: High severity Trend Micro Vision One Status vulnerability
A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges. Please note: ths issue has already been addressed on the backend service and is no longer considered an active vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31284?
CVE-2025-31284 has been classified as a critical severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2025-31284?
To fix CVE-2025-31284, ensure that you update to the latest version of Trend Micro Vision One Status where the vulnerability has been patched.
What versions of Trend Micro Vision One Status are affected by CVE-2025-31284?
CVE-2025-31284 affects all versions of Trend Micro Vision One Status prior to the security patch release.
What type of attack does CVE-2025-31284 enable?
CVE-2025-31284 enables an attacker to exploit broken access controls to escalate privileges within the application.
Is CVE-2025-31284 an authenticated or unauthenticated vulnerability?
CVE-2025-31284 is an authenticated vulnerability, as it requires legitimate user access to exploit the privilege escalation.