PT-2025-29379 · Tanium · Benchmark

Published 2025-07-13 · Updated 2026-02-05 · CVE-2025-15341

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tanium versions (affected versions not specified) Trivy version 0.64.1

Description Tanium Benchmark had an issue with incorrect default permissions. Trivy version 0.64.1 was patched to address a key fix for container security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Update Trivy to a newer version.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-15341

Affected Products

Benchmark

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-15341 · Security Note
• https://security.tanium.com/TAN-2025-029 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-15341 · Vendor Advisory
• https://twitter.com/Cezar_H_Linux/status/1944404109601194254 · Twitter Post
• https://twitter.com/CVEnew/status/2019488339737604456 · Twitter Post
• https://t.me/CVEtracker/43860 · Telegram Post