CVE-2025-15340 is a medium-severity vulnerability affecting Tanium Comply, stemming from incorrect default permissions. An authenticated attacker could exploit this over the network with low complexity to achieve high confidentiality and integrity impacts. While the FAUCET Risk Score is high at 87/100, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.24.0, < 2.24.159CPE matchmatch criteria | cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:* | ||
>= 2.29.0, < 2.29.124CPE matchmatch criteria | cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:* | ||
>= 2.32.0, < 2.32.155CPE matchmatch criteria | cpe:2.3:a:tanium:comply:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.