« Volver al listado

CVE-2021-1629

Estado: ModificadaMedia (6.1)—

Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Tableau — Tableau Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-1629",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 6.1,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@salesforce.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Tableau",
          "versions": [
            {
              "status": "affected",
              "version": "Tableau Server versions affected on both Windows and Linux are: 2019.4 through 2019.4.17 2020.1 through 2020.1.13 2020.2 through 2020.2.10 2020.3 through 2020.3.6 2020.4 through 2020.4.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-03-26T17:15:12.780",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "security@salesforce.com"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2021/Apr/22",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "security@salesforce.com"
    },
    {
      "url": "https://help.salesforce.com/articleView?id=000357424&type=1&mode=1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@salesforce.com"
    },
    {
      "url": "http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html",
      "tags": [
        "Exploit",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2021/Apr/22",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://help.salesforce.com/articleView?id=000357424&type=1&mode=1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users."
    },
    {
      "lang": "es",
      "value": "Tableau Server no puede comprobar determinadas URL que están embebidas en los correos electrónicos enviados a usuarios de Tableau Server."
    }
  ],
  "lastModified": "2026-06-17T03:32:12.330",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "388A8A90-AF80-4E88-8607-5A0904E61B10",
              "versionEndExcluding": "2019.4.18",
              "versionStartIncluding": "2019.4"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8203E31F-DDC5-4646-9DC1-4920E2E3E84E",
              "versionEndExcluding": "2020.1.15",
              "versionStartIncluding": "2020.1"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5517AD17-3F21-43B3-956C-7E1016154530",
              "versionEndExcluding": "2020.2.12",
              "versionStartIncluding": "2020.2"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C94514D-348F-474D-89A0-5C4D0041DD1F",
              "versionEndExcluding": "2020.3.7",
              "versionStartIncluding": "2020.3"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEC00D02-0C3C-4E5E-9D79-81638AC9AFB4",
              "versionEndExcluding": "2020.4.3",
              "versionStartIncluding": "2020.4"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "388A8A90-AF80-4E88-8607-5A0904E61B10",
              "versionEndExcluding": "2019.4.18",
              "versionStartIncluding": "2019.4"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8203E31F-DDC5-4646-9DC1-4920E2E3E84E",
              "versionEndExcluding": "2020.1.15",
              "versionStartIncluding": "2020.1"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5517AD17-3F21-43B3-956C-7E1016154530",
              "versionEndExcluding": "2020.2.12",
              "versionStartIncluding": "2020.2"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C94514D-348F-474D-89A0-5C4D0041DD1F",
              "versionEndExcluding": "2020.3.7",
              "versionStartIncluding": "2020.3"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DEC00D02-0C3C-4E5E-9D79-81638AC9AFB4",
              "versionEndExcluding": "2020.4.3",
              "versionStartIncluding": "2020.4"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@salesforce.com"
}