CVE-2020-6939: Critical severity tableau server vulnerability
Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions affected on both Windows and Linux are: 2018.2 through 2018.2.27, 2018.3 through 2018.3.24, 2019.1 through 2019.1.22, 2019.2 through 2019.2.18, 2019.3 through 2019.3.14, 2019.4 through 2019.4.13, 2020.1 through 2020.1.10, 2020.2 through 2020.2.7, and 2020.3 through 2020.3.2.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this Tableau Server vulnerability?
The vulnerability ID of this Tableau Server vulnerability is CVE-2020-6939.
What is the severity level of the CVE-2020-6939 vulnerability?
The severity level of the CVE-2020-6939 vulnerability is critical with a score of 9.8.
How does the CVE-2020-6939 vulnerability affect Tableau Server?
The CVE-2020-6939 vulnerability affects Tableau Server installations that are configured with Site-Specific SAML and allow the APIs to be used by unauthenticated users.
What is the potential impact of the CVE-2020-6939 vulnerability?
If exploited, the CVE-2020-6939 vulnerability could allow a malicious user to configure Site-Specific SAML settings and lead to account takeover for users of that site.
How can I fix the CVE-2020-6939 vulnerability?
To fix the CVE-2020-6939 vulnerability, Tableau Server users should upgrade to a version that is not affected by the vulnerability.