Restricted data disclosure via incorrect permissions

Information disclosure in Tanium Threat Response allows remote authenticated users to gain read-only access to restricted data. The access-control logic grants accounts holding only the Threat Response Sources - Write permission read access to data outside their authorization boundary. Tanium has not disclosed the affected request or enforcement path; exploitation requires an authenticated Tanium account with that permission.