ID de Prueba:	1.3.6.1.4.1.25623.1.0.111049
Categoría:	Web application abuses
Título:	Tableau Server 8.0.x < 8.0.7, 8.1.x < 8.1.2 Unspecified SQLi Vulnerability
Resumen:	Tableau Server is prone to a SQL injection (SQLi); vulnerability.
Descripción:	Summary: Tableau Server is prone to a SQL injection (SQLi) vulnerability. Vulnerability Insight: The flaw exists because the application fails to sufficiently sanitize user-supplied data to the '/views?modified_after=' URI. Vulnerability Impact: An attacker can exploit these issues by manipulating the SQL query logic to carry out unauthorized actions on the underlying database. Affected Software/OS: Tableau Server versions 8.0.x prior to 8.0.7 and 8.1.x prior to 8.1.2 are vulnerable. Solution: Update to version 8.0.7, 8.1.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1204 BugTraq ID: 65171 http://www.securityfocus.com/bid/65171 http://www.exploit-db.com/exploits/31578 https://www.trustwave.com/spiderlabs/advisories/TWSL2014-003.txt http://osvdb.org/102568 http://www.securitytracker.com/id/1029706 http://secunia.com/advisories/56620 XForce ISS Database: tableau-server-cve20141204-sql-injection(90730) https://exchange.xforce.ibmcloud.com/vulnerabilities/90730
Copyright	Copyright (C) 2015 SCHUTZWERK GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.