CVE-2025-26495 — Sensitive Data Exposure in Tableau Server

CVE-2025-26495

Sensitive Data Exposure in Tableau Server PUBLISHED

Description (CNA)

Cleartext Storage of Sensitive Information vulnerability in Salesforce Tableau Server can record the Personal Access Token (PAT) into logging repositories.This issue affects Tableau Server: before 2022.1.3, before 2021.4.8, before 2021.3.13, before 2021.2.14, before 2021.1.16, before 2020.4.19.

Affected (CNA)

Vendor / product	Versions
Salesforce / Tableau Server	affected 0 before 2022.1.3; affected 0 before 2021.4.8; affected 0 before 2021.3.13; affected 0 before 2021.2.14; affected 0 before 2021.1.16; affected 0 before 2020.4.19

CWE

CWE-312

References

https://help.salesforce.com/s/articleView?id=000390611&type=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.