CVE-2020-6939
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2020
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account takeover for users of that site. Tableau Server versions affected on both Windows and Linux are: 2018.2 through 2018.2.27, 2018.3 through 2018.3.24, 2019.1 through 2019.1.22, 2019.2 through 2019.2.18, 2019.3 through 2019.3.14, 2019.4 through 2019.4.13, 2020.1 through 2020.1.10, 2020.2 through 2020.2.7, and 2020.3 through 2020.3.2.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Tableau Server
- Vendor
- n/a
- Product
- Tableau Server
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| versions affected on both Windows and Linux are: 2018.2 through 2018.2.27 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2018.3 through 2018.3.24 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2019.1 through 2019.1.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2019.2 through 2019.2.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2019.3 through 2019.3.14 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2019.4 through 2019.4.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2020.1 through 2020.1.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2020.2 through 2020.2.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2020.3 through 2020.3.2 | affected | Unavailable | Unavailable | Unavailable | None listed |