Tanium Server and Module Server Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Tanium Server and Tanium Module Server. This issue affects versions 7.4.6 prior to 7.4.6.1151, 7.5.6 prior to 7.5.6.1161, as well as the 2024H1 and 2024H2 releases of both products. The vulnerability allows an attacker with low privileged access to an appliance to escalate privileges locally by invoking specific plugins.

Impact

Exploitation of this vulnerability could enable an attacker to gain elevated privileges on the affected system, potentially leading to unauthorized access or actions within the Tanium environment.

Remediation

Users can upgrade to Tanium Server or Tanium Module Server versions 7.4.6.1151, 7.5.6.1161, or later. For the 2024H1 release, Tanium Module Server and Tanium Server users should update to version 7.6.2.1293 or later. For the 2024H2 release, the recommended update is version 7.6.4.2114 or later.