Description
Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several intermediate CA certificates associated with compromised private keys.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tanium | TanOS | 1.8.5 – < 1.8.5.0326, 1.8.6 – < 1.8.6.0193, 1.9.0 – < 1.9.0.0089 | 1.8.5.0326 |
| Tanium | Asset | 1.33 – < 1.33.334, 1.36 – < 1.36.182, 1.39 – < 1.39.164 | 1.33.334 |
| Tanium | Comply | 2.32 – < 2.32.275, 2.35 – < 2.35.337, 2.37 – < 2.37.347 | 2.32.275 |
| Tanium | Connect | 5.29 – < 5.29.272, 5.37 – < 5.37.177, 5.47 – < 5.47.135 | 5.29.272 |
| Tanium | Integrity Monitor | 3.6 – < 3.6.608, 3.7 – < 3.7.383, 3.8 – < 3.8.362 | 3.6.608 |
| Tanium | Health Check | 1.13 – < 1.13.653 | 1.13.653 |
| Tanium | Endpoint Configuration Toolset Solution | 1.51 – < 1.51.61, 1.59 – < 1.59.51, 1.71 – < 1.71.26 | 1.51.61 |
| Tanium | Patch | 3.24 – < 3.24.328, 3.28 – < 3.28.346, 3.32 – < 3.32.383 | 3.24.328 |
| Tanium | Performance | 1.25 – < 1.25.196 | 1.25.196 |
| Tanium | Reputation | 6.6 – < 6.6.150, 6.7 – < 6.7.143, 6.8 – < 6.8.167 | 6.6.150 |
| Tanium | Reveal | 2.4 – < 2.4.109, 2.5 – < 2.5.166 | 2.4.109 |
| Tanium | Threat Response | 4.9 – < 4.9.480, 4.12 – < 4.12.353, 4.17 – < 4.17.333 | 4.9.480 |
| Tanium | Provision Host | 10.4.100 – < 10.4.100, 10.8.115 – < 10.8.115, 10.9.113 – < 10.9.113, 10.10.189 – < 10.10.189, 10.11.127 – < 10.11.127 | 10.4.100 |