Severity: Low-Medium

Summary: Under certain conditions a user who accesses a workbook as a Guest user can view data as the publisher of the data.

Vulnerable Versions: Tableau Server 9.0.0 (through 9.0.2)

Resolution: The issue can be fixed by upgrading to the following Tableau Server versions:

Tableau Server 9.0.3

Work around: In the meantime, disable Guest access.

Knowledgebase Article: Security Advisory: Guest Users Can See Data As the Publisher User | Tableau Software