Severity: Low-Medium

 

Summary: Under certain conditions a user who accesses a workbook as a Guest user can view data as the publisher of the data.

 

Vulnerable Versions: Tableau Server 9.0.0 (through 9.0.2)

 

Resolution: The issue can be fixed by upgrading to the following Tableau Server versions:

Tableau Server 9.0.3

 

Work around: In the meantime, disable Guest access.

 

Knowledgebase Article: Security Advisory: Guest Users Can See Data As the Publisher User | Tableau Software