Technical impact
This vulnerability allows the disclosure of sensitive information from Tanium Server. The weakness is classified as CWE‑522, indicating that privileged information may be exposed to unauthorized parties.
Affected Systems
The affected product is Tanium Server. No specific version information is provided, so all deployments of Tanium Server may be impacted until an official fix is applied.
Risk and Exploitability
The CVSS score for this issue is 2.7, indicating low severity. No EPSS score is available, so the exploitation probability is unknown. The vulnerability is not listed in CISA KEV, suggesting it is not currently being actively exploited. The likely attack vector is not explicitly documented, but based on the nature of an information disclosure, an attacker would need a level of access that allows them to query the Tanium Server or read its configuration data. Given the low severity and lack of known exploits, the risk to confidentiality is limited, but remediation is still advised to prevent potential data exposure.
