Tanium Reputation Improper Access Controls Vulnerability Allowing Unauthorized Data Access

An improper access controls vulnerability has been identified in Tanium's Reputation product. This vulnerability affects several versions prior to specific update releases in 2024 and 2025. The issue could allow an authenticated Tanium user with the 'Reputation Read' permission to gain unauthorized read and write access to sensitive data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to read and write data in the Tanium Reputation application, allowing users to access information they should not be privy to and potentially modify it.

Remediation

Users can update to Tanium Reputation version 6.3.227 or later, version 6.5.50 or later, or version 6.6.72 or later, depending on their current release.