6.5Mittel
CVE-2025-15340Tanium addressed an incorrect default permissions vulnerability in Comply.
Beschreibung
Tanium addressed an incorrect default permissions vulnerability in Comply.
Schwachstellentyp (CWE):
CWE-276
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Tanium | Comply | 2.24.0 – < 2.24.159, 2.29.0 – < 2.29.124, 2.32.0 – < 2.32.155 | |
| tanium | service comply | 2.24.158 |
Referenzen und Patches
- TAN-2025-029 Vendor Advisory
CPE-Treffer (NVD) (3)
cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:*≥ 2.24.0 < 2.24.159cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:*≥ 2.29.0 < 2.29.124cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:*≥ 2.32.0 < 2.32.155