STIGQter: STIG Summary: Tanium 7.x Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

All installation files originally downloaded to the Tanium Server must be configured to download to a location other than the Tanium Server directory.

DISA Rule

SV-253847r997269_rule

Vulnerability Number

V-253847

Group Title

SRG-APP-000133

Rule Version

TANS-SV-000016

Severity

CAT II

CCI(s)

• CCI-001499 - Limit privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

1. Access the Tanium Server.

2. Log on to the server with an account that has administrative privileges.

3. Create a new folder outside of the Tanium Server directory (e.g., E:\Stage\Downloads).

4. Run regedit as Administrator.

5. Navigate to HKEY_LOCAL_MACHINE >> SOFTWARE >> WOW6432Node >> Tanium >> Tanium Server.

6. Add or change the value name "DownloadPath" with value type "REG_SZ" to point to the location of the relocated installation package files (e.g., E:\Stage\Downloads).

7. Move the files from the original directory (E:\Program Files\Tanium\Tanium Server\Downloads) to the location created for the installation package files.

8. Move the files from the original directory (E:\Program Files\Tanium\Tanium Server\Downloads) to the location created for the installation package files.

Check Contents

1. Access the Tanium Server.

2. Log on to the server with an account that has administrative privileges.

3. Run regedit as Administrator.

4. Navigate to HKEY_LOCAL_MACHINE >> SOFTWARE >> WOW6432Node >> Tanium >> Tanium Server.

5. Validate the value name "DownloadPath" with value type "REG_SZ" does not point to a location within the Tanium Server directory.

If the value name "DownloadPath" with value type "REG_SZ" does not exist or points to a location within the Tanium Server directory, this is a finding.

If the "DownloadPath REG_SZ" value points to a location within the Tanium Server directory, this is a finding.

Vulnerability Number

V-253847

Documentable

False

Rule Version

TANS-SV-000016

Severity Override Guidance

1. Access the Tanium Server.

2. Log on to the server with an account that has administrative privileges.

3. Run regedit as Administrator.

4. Navigate to HKEY_LOCAL_MACHINE >> SOFTWARE >> WOW6432Node >> Tanium >> Tanium Server.

5. Validate the value name "DownloadPath" with value type "REG_SZ" does not point to a location within the Tanium Server directory.

If the value name "DownloadPath" with value type "REG_SZ" does not exist or points to a location within the Tanium Server directory, this is a finding.

If the "DownloadPath REG_SZ" value points to a location within the Tanium Server directory, this is a finding.

Check Content Reference

M

Target Key

5476