Performance Cx
Monthly
Local denial of service in the Tanium Performance client extension (performance-cx) and the Tanium Endpoint Configuration Toolset Solution lets a user who already holds low-level privileges on an endpoint exhaust resources in the agent, degrading or halting its availability with no confidentiality or integrity impact. The flaw is availability-only (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) and requires local access to the host, so it is a moderate-severity issue rather than a top-tier priority. Tanium has released fixed builds and no public exploit was identified at time of analysis; priority is this_month.
Local denial of service in the Tanium Performance client extension (performance-cx) and the Tanium Endpoint Configuration Toolset Solution lets a user who already holds low-level privileges on an endpoint exhaust resources in the agent, degrading or halting its availability with no confidentiality or integrity impact. The flaw is availability-only (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) and requires local access to the host, so it is a moderate-severity issue rather than a top-tier priority. Tanium has released fixed builds and no public exploit was identified at time of analysis; priority is this_month.