CVE-2017-5178: Critical severity Schneider-electric Tableau Desktop vulnerability
An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials after installation, and changing the default credentials in the embedded Tableau Server is not documented. If Tableau Server is used with Windows integrated security (Active Directory), the software is not vulnerable. However, when Tableau Server is used with local authentication mode, the software is vulnerable. The default system account could be used to gain unauthorized access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Use Tableau Server with Windows integrated security (Active Directory) instead of local authentication mode to avoid the vulnerability.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5178?
CVE-2017-5178 is classified as a medium severity vulnerability due to the presence of a default system account with default credentials.
How do I fix CVE-2017-5178?
To fix CVE-2017-5178, configure the default system account with non-default credentials and ensure proper access controls are in place.
Which versions are affected by CVE-2017-5178?
CVE-2017-5178 affects Schneider Electric Tableau Server/Desktop versions 7.0 to 10.1.3 and Wonderware Intelligence versions 2014R3 and prior.
What type of software is affected by CVE-2017-5178?
CVE-2017-5178 affects industrial automation software including Schneider Electric Tableau Server/Desktop and Wonderware Intelligence.
Is there a known exploit for CVE-2017-5178?
While there may not be a widely reported exploit, the vulnerability presents a significant risk due to the presence of default credentials.