This vulnerability in Tanium Threat Response involves unauthorized exposure of sensitive information. It affects versions 4.6.0 and 4.9.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and low confidentiality impact. No integrity or availability impacts are noted. No patch or remediation details are provided in the available data.

The impact is limited to a low confidentiality loss of sensitive information. There is no impact on integrity or availability. Exploitation requires high privileges, reducing the likelihood of unauthorized access by low-privileged users. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor Tanium's advisories for updates. Given the high privilege requirement, restricting access to the affected versions and ensuring proper privilege management may reduce risk.