Tanium Partner Integration Incorrect Default Permissions Vulnerability

A vulnerability allowing incorrect default permissions has been identified in Tanium's Partner Integration component. This issue affects several versions prior to the 2025H1 release, specifically those before Update 5. The vulnerability could enable an authenticated Tanium user with certain service account permissions to read or write all platform content.

Impact

Exploitation of this vulnerability could allow an authenticated user with specific service account permissions to read and write all platform content, potentially leading to unauthorized data access or modification.

Remediation

Users can update to Tanium Partner Integration version 1.3.40 or later to address this vulnerability.