« Volver al listado

CVE-2025-52446

Estado: AnalizadaAlta (8)—

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to the production database cluster).This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

UI:R en vector CVSS indica interacción del usuario requerida. Bypass de autorización en tab-doc API permite acceso no autorizado a BD de producción (T1078.001: acceso con credenciales comprometidas; T1005: lectura de datos)

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Password PoliciesMulti-factor AuthenticationApplication Isolation and SandboxingExploit ProtectionUpdate SoftwareData Loss Prevention

Tecnologías afectadas (1)

Tableau — Tableau Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-52446",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-52446",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-07-25T18:58:35.575989Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.1
      }
    ]
  },
  "affected": [
    {
      "source": "security@salesforce.com",
      "affectedData": [
        {
          "vendor": "Salesforce",
          "modules": [
            "tab-doc api"
          ],
          "product": "Tableau Server",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2025.1.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2024.2.12",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2023.3.19",
              "versionType": "semver"
            }
          ],
          "platforms": [
            "Windows",
            "Linux"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-07-25T19:15:40.253",
  "references": [
    {
      "url": "https://help.salesforce.com/s/articleView?id=005105043&type=1",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@salesforce.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@salesforce.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-639"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux (tab-doc api modules) allows Interface Manipulation (data access to the production database cluster).This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de omisión de autorización a través de una clave controlada por el usuario en Salesforce Tableau Server en Windows, Linux (módulos de API tab-doc) permite la manipulación de la interfaz (acceso a los datos del clúster de la base de datos de producción). Este problema afecta a Tableau Server: antes de 2025.1.3, antes de 2024.2.12, antes de 2023.3.19."
    }
  ],
  "lastModified": "2026-06-17T09:36:30.160",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19541292-4BD4-4BD5-AA68-3836ECC1EBE0",
              "versionEndExcluding": "2023.3.19"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AC0483E-569A-497C-BB94-D129FACC17D5",
              "versionEndExcluding": "2024.2.12",
              "versionStartIncluding": "2024.2"
            },
            {
              "criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E78711C-389B-4E20-9623-8B0CF6BBCAC8",
              "versionEndExcluding": "2025.1.3",
              "versionStartIncluding": "2025.1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@salesforce.com"
}