What is CVE-2020-6939?

CVE-2020-6939 is a critical-severity vulnerability in Tableau Tableau_server. CVSS score: 9.8/10. Published 2020-11-23.

How severe is CVE-2020-6939?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Tableau Tableau_server

CVE-2020-6939

Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. If exploited, this could allow a malicious user to configure Site-Specific SAML settings and could lead to account ta…

EPSS: 0.018 (75.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Tableau Tableau_server
N/a Tableau Server — versions versions affected on both Windows and Linux are: 2018.2 through 2018.2.27, 2018.3 through 2018.3.24, 2019.1 through 2019.1.22

References

security@salesforce.com (x_refsource_CONFIRM, Third Party Advisory)

Frequently asked questions

What is CVE-2020-6939?: CVE-2020-6939 is a critical-severity vulnerability in Tableau Tableau_server. CVSS score: 9.8/10. Published 2020-11-23.
How severe is CVE-2020-6939?: Critical severity. CVSS v3 base score is 9.8 out of 10.