CVE-2017-5178

The record

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials after installation, and changing the default credentials in the embedded Tableau Server is not documented. If Tableau Server is used with Windows integrated security (Active Directory), the software is not vulnerable. However, when Tableau Server is used with local authentication mode, the software is vulnerable. The default system account could be used to gain unauthorized access.

Affected packages

Related vulnerabilities

• CVE-2026-87827 Certain KGUARD DVR devices running vulnerable firmware expose a system command execution… CWE-1188
• CVE-2026-86464 In the current development version of Eclipse aeriOS, for which no official release has… CWE-1188
• CVE-2026-77348 Wallos is an open-source, self-hostable personal subscription tracker. CWE-1188
• CVE-2026-53507 oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post… CWE-1188
• CVE-2026-75062 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in… CWE-1188
• CVE-2026-55581 mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. CWE-1188
• CVE-2026-62388 NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security… CWE-1188
• CVE-2026-33921 The Windows installer deployed Npcap leaving its access restriction option at the… CWE-1188