Tanium’s Threat Response has a flaw where it writes sensitive information directly to log files. This can lead to accidental disclosure of confidential data, potentially allowing attackers or unauthenticated users to retrieve components of secure communications or user credentials from logs. The weakness leverages the logging subsystem to persist data it should not expose, which can compromise confidentiality if accessed by privileged or malicious actors.

The affected product is Tanium Threat Response. No specific version numbers are listed in the CVE data, so any deployment of this product that uses the default logging configuration may be vulnerable unless the vendor has applied a fix.

The vulnerability received a CVSS score of 4.2, indicating a moderate severity. No EPSS score is available, so the likelihood of exploitation cannot be quantified from the CVE entry. The vulnerability is not listed in the CISA KEV catalog, suggesting no known large-scale exploitation yet. The likely attack vector is inferred to be local or privileged because the logging subsystem typically requires write access to system files. If an attacker has compromised log configuration or source code injection in Threat Response, they could trigger the logging of sensitive data.