SB2017070407 - Multiple vulnerabilities in Tableau Server

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2017070407

SB2017070407 - Multiple vulnerabilities in Tableau Server

Published: July 4, 2017

Security Bulletin ID SB2017070407
Severity
Low
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Cross-site scripting (CVE-ID: N/A)

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability is caused by incorrect filtration of input data. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in victim’s browser in security context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.


2) Information disclosure (CVE-ID: N/A)

The disclosed vulnerability allows a local attacker to obtain potentially sensitive information on the target system.

The weakness exists due to improper permission controls. A local attacker with access to Tableau logs can obtain passwords to data sources or secrets used to encrypt private keys used in SSL/TLS communication.

Successful exploitation of the vulnerability results in information disclosure.


3) SQL injection (CVE-ID: N/A)

The vulnerability allows a remote attacker to execute arbitrary SQL commands in database.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote attacker can supply a specially crafted parameter value in order to execute arbitrary SQL statements in the repository (Postgres) database.

Successful exploitation of the vulnerability may allow an attacker to gain complete control over vulnerable database.

Remediation

Install update from vendor's website.

References