A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive information in log files.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tableau_server | Tableau | 2018.1 (including) | 2020.2 (including) |
| Tableau_server | Tableau | 10.5 (including) | 10.5 (including) |
Potential Mitigations
Related Attack Patterns
References
- https://help.salesforce.com/apex/HTViewSolution?urlname=Sensitive-information-disclosure-vulnerability-affecting-Tableau-Server-in-certain-use-cases\u0026language=en_US
- https://help.salesforce.com/articleView?id=000354158\u0026type=1\u0026mode=1
- https://help.salesforce.com/apex/HTViewSolution?urlname=Sensitive-information-disclosure-vulnerability-affecting-Tableau-Server-in-certain-use-cases\u0026language=en_US
- https://help.salesforce.com/articleView?id=000354158\u0026type=1\u0026mode=1