7.4Hoch

CVE-2026-121565Tanium addressed an improper certificate validation vulnerability in multiple products

Tanium TanOS; Tanium Asset; Tanium Comply; Tanium Connect Veröffentlicht: (vor 11 Tagen)

Beschreibung

Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.

Schwachstellentyp (CWE): CWE-295

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Tanium Asset 1.33 – < 1.33.334, 1.36 – < 1.36.182, 1.39 – < 1.39.164
Tanium Comply 2.32 – < 2.32.275, 2.35 – < 2.35.337, 2.37 – < 2.37.347
Tanium Connect 5.29 – < 5.29.272, 5.37 – < 5.37.177, 5.47 – < 5.47.135
Tanium Endpoint Configuration Toolset Solution 1.51 – < 1.51.61, 1.59 – < 1.59.51, 1.71 – < 1.71.26
Tanium Health Check 1.13 – < 1.13.653
Tanium Integrity Monitor 3.6 – < 3.6.608, 3.7 – < 3.7.383, 3.8 – < 3.8.362
Tanium Patch 3.24 – < 3.24.328, 3.28 – < 3.28.346, 3.32 – < 3.32.383
Tanium Performance 1.25 – < 1.25.196
Tanium Provision Host 10.4.100 – < 10.4.100, 10.8.115 – < 10.8.115, 10.9.113 – < 10.9.113, 10.10.189 – < 10.10.189, 10.11.127 – < 10.11.127
Tanium Reputation 6.6 – < 6.6.150, 6.7 – < 6.7.143, 6.8 – < 6.8.167
Tanium Reveal 2.4 – < 2.4.109, 2.5 – < 2.5.166
Tanium TanOS 1.8.5 – < 1.8.5.0326, 1.8.6 – < 1.8.6.0193, 1.9.0 – < 1.9.0.0089
Tanium Threat Response 4.9 – < 4.9.480, 4.12 – < 4.12.353, 4.17 – < 4.17.333

Referenzen und Patches