Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2020-6938
CVE-2020-6938:
Tableau Server vulnerability analysis and mitigation
Overview
A sensitive information disclosure vulnerability was identified in Tableau Server versions 10.5, 2018.x, 2019.x, and 2020.x released before June 26, 2020. The vulnerability, tracked as CVE-2020-6938, could potentially allow unauthorized access to sensitive information stored in log files (NIST NVD, MITRE CVE).
Technical details
The vulnerability affects multiple versions of Tableau Server including version 10.5, all 2018.x releases, all 2019.x releases, and 2020.x versions released prior to June 26, 2020. The issue specifically relates to the exposure of sensitive information in log files, which could be accessed by unauthorized users (NIST NVD).
Impact
The vulnerability could allow unauthorized users to access sensitive information stored in Tableau Server log files, potentially exposing confidential data (NIST NVD).
Mitigation and workarounds
The vulnerability was addressed in Tableau Server versions released after June 26, 2020. Users are advised to upgrade to a patched version to protect against this security issue (NIST NVD).
Additional resources
Source: This report was generated using AI
Related Tableau Server vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management