6.5Medium
CVE-2025-15340Tanium addressed an incorrect default permissions vulnerability in Comply.
Description
Tanium addressed an incorrect default permissions vulnerability in Comply.
Weakness (CWE):
CWE-276
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Tanium | Comply | 2.24.0 – < 2.24.159, 2.29.0 – < 2.29.124, 2.32.0 – < 2.32.155 | |
| tanium | service comply | 2.24.158 |
References and patches
- TAN-2025-029 Vendor Advisory
CPE matches (NVD) (3)
cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:*≥ 2.24.0 < 2.24.159cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:*≥ 2.29.0 < 2.29.124cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:*≥ 2.32.0 < 2.32.155