CVE-2025-31285
CVSS 3.1 Score 4.6 of 10 (medium)
Details
Published Apr 2, 2025
Updated: Apr 7, 2025
CWE ID 269
Summary
CVE-2025-31285 is a vulnerability in the Trend Vision One Role Name component that involved broken access controls. An administrator could exploit this issue by creating new users and updating their roles, potentially escalating privileges. Although this vulnerability has been rectified on the backend service, it posed a significant risk to system security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.