CVE-2025-26495CWE-312

Sensitive Data Exposure in Tableau Server

High · published February 11, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00337 · 25.8th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2025-02-11T17:56Z
EPSS history
Timeline
  • 11 FEB 17:56Z
    Sensitive Data Exposure in Tableau Server
    cvelistv5