Privilege escalation via unrestricted account role changes

Broken access control in Trend Micro Trend Vision One Status allows remote authenticated users to escalate privileges through role changes. The Status component lets an administrator-created account change its assigned role without enforcing the intended privilege boundary. An administrator must first create the account, after which its user can obtain broader platform privileges; the vendor reported no availability impact.