Improper Certificate Validation in Tanium Appliance
CVE-2025-15323

3.7LOW

Key Information:

Vendor

Tanium

Status
Tanium Appliance
Vendor
CVE Published:
5 February 2026

What is CVE-2025-15323?

An improper certificate validation vulnerability exists in Tanium Appliance that could potentially allow attackers to exploit trust in certificate authorities, leading to unauthorized access or data interception. This issue highlights the necessity for robust validation mechanisms to ensure secure communications and protect sensitive information. For more information, refer to the security advisory at Tanium's official website.

Affected Version(s)

Tanium Appliance 1.8.3.0 < 1.8.3.0199

Tanium Appliance 1.8.4.0 < 1.8.4.0205

Tanium Appliance 1.8.5.0 < 1.8.5.0236

References

https://security.tanium.com/TAN-2025-031

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.