CVE Vulnerabilities

CVE-2020-6938

Insertion of Sensitive Information into Log File

Published: Jul 08, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive information in log files.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Tableau_server Tableau 2018.1 (including) 2020.2 (including)
Tableau_server Tableau 10.5 (including) 10.5 (including)

Potential Mitigations

References