Tanium Threat Response Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in Tanium's Threat Response product, affecting several versions prior to specific update releases. This vulnerability could allow an authenticated user with the 'Threat Response Sources - Write' permission to access data that should be restricted.

Impact

Exploitation of this vulnerability could lead to unauthorized read-only access to sensitive data for certain authenticated users.

Remediation

Users can upgrade to Threat Response v4.5.266 or later, v4.6.536 or later, or v4.9.324 or later, depending on their current release.