Vulnerability Description
Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau only supports product versions for 24 months after release. Older versions have reached their End of Life and are no longer supported. They are also not assessed for potential security issues and do not receive security updates.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tableau | Tableau Server | >= 2020.4, <= 2020.4.20 |
Related Weaknesses (CWE)
References
- https://help.salesforce.com/s/articleView?id=000367027&type=1Broken Link
- https://kb.tableau.com/articles/Issue/issue-affecting-tableau-server-administratVendor Advisory
- https://help.salesforce.com/s/articleView?id=000367027&type=1Broken Link
FAQ
What is CVE-2022-22128?
CVE-2022-22128 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau only supports product ve...
How severe is CVE-2022-22128?
CVE-2022-22128 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-22128?
Check the references section above for vendor advisories and patch information. Affected products include: Tableau Tableau Server.