Authenticated data access via undisclosed authorization flaw

Incorrect authorization in Tanium Reputation allows remote authenticated users to read and write restricted data via network requests. Tanium has not disclosed the affected request, handler, or missing authorization operation beyond identifying improper access controls in the Reputation service. Exploitation requires a Tanium account with Reputation Read permission and permits access to data outside that account's authorization boundary.