An improper access control flaw exists in Tanium Enforce. This weakness allows users or attackers who should not have privileged rights to access or modify protected resources. The vulnerability is classified as CWE-862, which highlights that the application fails to enforce authorization checks for the operations it performs. The direct impact is potential privilege escalation and unauthorized data disclosure or modification, compromising confidentiality and integrity of managed assets.

The vulnerability affects Tanium Enforce. No specific version information is provided, so all released builds of Enforce should be examined for the fix.

The CVSS score of 4.3 indicates a low severity assessment. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited, if any, known exploitation activity. The attack vector is not explicitly disclosed; based solely on the access control nature of the flaw, it is inferred that unauthorized users capable of interacting with Enforce (possibly via web interfaces, APIs, or local user accounts) could exploit the weakness if not properly restricted.