This vulnerability in Tanium Comply is due to missing authorization checks, which could permit an attacker with low privileges to perform unauthorized actions impacting confidentiality and integrity. The CVSS vector indicates the attack can be conducted remotely over the network with low attack complexity and no user interaction required. The affected versions are exactly 2.32, 2.35, and 2.37. No vendor advisory or patch information is currently available to confirm remediation status.

An attacker with low privileges could exploit this vulnerability remotely to gain unauthorized access or perform unauthorized actions, potentially leading to limited confidentiality and integrity impacts. There is no indication of availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected Tanium Comply versions and monitor for suspicious activity related to authorization bypass attempts.