This vulnerability in Tanium Comply is due to missing authorization checks, allowing users with limited privileges to perform unauthorized actions that impact data integrity. The CVSS 3.1 score is 6.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The affected versions explicitly include 2.32, 2.35, and 2.37. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

The vulnerability allows unauthorized modification or manipulation of data within Tanium Comply, impacting data integrity. There is no impact on confidentiality or availability. The attack requires low privileges and can be performed remotely over the network without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to Tanium Comply to trusted users and monitor for unusual activity consistent with unauthorized access attempts.