CVE-2025-15343
Incorrect Default Permissions in Tanium Enforce Allow Unauthorized Access
Publication date: 2026-02-05
Last updated on: 2026-02-10
Assigner: Tanium
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tanium | enforce | From 2.7.0 (inc) to 2.7.367 (exc) |
| tanium | enforce | From 2.8.0 (inc) to 2.8.601 (exc) |
| tanium | enforce | From 2.9.0 (inc) to 2.9.574 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-276 | During installation, installed file permissions are set to allow anyone to modify those files. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
[{'type': 'paragraph', 'content': 'CVE-2025-15343 is a medium-severity vulnerability in Tanium Enforce caused by incorrect default permissions.'}, {'type': 'paragraph', 'content': 'It allows an authenticated Tanium user who has the "Enforce Service Account" permission to read and write all platform content.'}, {'type': 'paragraph', 'content': "This means the user can potentially compromise the confidentiality and integrity of the platform's data."}, {'type': 'paragraph', 'content': 'The vulnerability does not affect the availability of the platform.'}] [1]
How can this vulnerability impact me? :
If exploited, this vulnerability allows an authenticated user with specific permissions to read and modify all platform content.
This can lead to unauthorized disclosure of sensitive information (confidentiality impact) and unauthorized changes to data (integrity impact).
However, it does not impact the availability of the system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
There is no specific information provided about detection methods or commands to identify this vulnerability on your network or system.
What immediate steps should I take to mitigate this vulnerability?
The only remediation available is to upgrade Tanium Enforce to a fixed version.
- Upgrade to Update 24 (v2.7.367) or later for the 2024H1 release.
- Upgrade to Update 13 (v2.8.601) or later for the 2024H2 release.
- Upgrade to Update 7 (v2.9.574) or later for the 2025H1 release.
No workarounds or other mitigations are available.