Enforce
CVE-2025-15343
MEDIUM
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
Tanium addressed an incorrect default permissions vulnerability in Enforce.
AnalysisAI
Tanium addressed an incorrect default permissions vulnerability in Enforce. [CVSS 6.5 MEDIUM]
Technical ContextAI
Classified as CWE-276 (Incorrect Default Permissions). Affects Enforce. Tanium addressed an incorrect default permissions vulnerability in Enforce.
RemediationAI
Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.
Server-side request forgery in Tanium Enforce allows authenticated low-privileged users to cause the Enforce server to i
OS command injection in Tanium Enforce enables a local attacker to execute arbitrary operating system commands at the pr
Tanium addressed an improper link resolution before file access vulnerability in Enforce. [CVSS 5.0 MEDIUM]
Same weakness CWE-276 – Incorrect Default Permissions
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today