PT-2025-6208 · Tableau+1 · Tableau Server+1

Published 2025-02-11 · Updated 2025-02-11 · CVE-2025-26490

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Opcenter Intelligence versions prior to V2501

Description: A personal access token disclosure vulnerability has been identified in Opcenter Intelligence, which is related to Tableau Server. This issue allows for the disclosure of personal access tokens. For more information, users can visit help.salesforce.com and search for the knowledge article with id 000390611.

Recommendations: For Opcenter Intelligence versions prior to V2501, update to version V2501 or later to resolve the issue. As a temporary workaround, consider restricting access to Tableau Server to minimize the risk of exploitation. Additionally, users should avoid using personal access tokens in Tableau Server until the issue is resolved.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-26490

Affected Products

Opcenter Intelligence

Tableau Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-26490 · Security Note
• https://t.me/cvedetector/17687 · Telegram Post
• https://cert-portal.siemens.com/productcert/html/ssa-246355.html · Note
• https://twitter.com/VulmonFeeds/status/1889330091441656308 · Twitter Post
• https://twitter.com/CVEnew/status/1889265751405793786 · Twitter Post
• https://help.salesforce.com/s/articleView?id=000390611&type=1 · Note
• https://twitter.com/WolfgangSesin/status/1889276778838999355 · Twitter Post