关键信息 漏洞标识符: CVE-2025-15321 漏洞编号: TAN-2025-024 发布时间: August 19, 2025 严重性: Low Base Score: 2.7 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N 影响 漏洞描述: 该漏洞允许具有tanadmin角色的经过身份验证的TanOS用户获得对本不应有访问权限的数据的只读访问权限。 受影响的版本: - 2024H1 Release: Tanium Appliance prior to Update 22 (v1.8.3.0196). - 2024H2 Release: Tanium Appliance prior to Update 11 (v1.8.4.0199). - 2025H1 Release: Tanium Appliance prior to Update 5 (v1.8.5.0227). 修复版本: - 2024H1 Release: Update 22 (Tanium Appliance v1.8.3.0196) and later. - 2024H2 Release: Update 11 (Tanium Appliance v1.8.4.0199) and later. - 2025H1 Release: Update 5 (Tanium Appliance v1.8.5.0227) and later. 解决方案和缓解措施 Workaround and Mitigations: 无 致谢 Tanium感谢来自NCIA/NCSC的Filip Waeytens, Frank Lycops, Jean-Michel Huguet, Jorge Escabias和Justin Hocquel负责地报告了此问题。