Impact
The vulnerability allows an attacker to trigger uncontrolled consumption of system resources within Tanium Enforce, leading to degraded performance or a denial of service. This flaw is classified as a resource exhaustion weakness under CWE-770, meaning the software fails to limit or regulate the amount of resources it consumes.
Affected Systems
The vulnerability affects Tanium Enforce. No specific affected version information is provided in the advisory.
Risk and Exploitability
The CVSS score of 4.3 indicates a medium severity vulnerability that could lead to a denial of service if exploited. EPSS data is not available, and the issue is not listed in CISA’s KEV, suggesting no widespread exploitation has been reported. Without explicit documentation of attack vectors, the exact method of exploitation remains unknown; however, the vulnerability could be triggered by malicious or erroneous operations within Enforce that allow excessive resource usage.
OpenCVE Enrichment