CVE-2017-5178

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials after installation, and changing the default credentials in the embedded Tableau Server is not documented. If Tableau Server is used with Windows integrated security (Active Directory), the software is not vulnerable. However, when Tableau Server is used with local authentication mode, the software is vulnerable. The default system account could be used to gain unauthorized access.

• CWE-1188

• http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000119/Vendor Advisory
• http://www.securityfocus.com/bid/96721Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-066-01Third Party Advisory, US Government Resource
• http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000119/Vendor Advisory
• http://www.securityfocus.com/bid/96721Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-066-01Third Party Advisory, US Government Resource

Published

Mar 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5170An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-5173An Improper Neutralization of Special Elements (in an OS com…9.8
• CVE-2017-5174An Authentication Bypass issue was discovered in Geutebruck …
• CVE-2017-5175Advantech WebAccess 8.1 and earlier contains a DLL hijacking…
• CVE-2017-5176A DLL Hijack issue was discovered in Rockwell Automation Con…
• CVE-2017-5177A Stack Buffer Overflow issue was discovered in VIPA Control…
• CVE-2017-5179Cross-site scripting (XSS) vulnerability in Tenable Nessus b…
• CVE-2017-5180Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LT…
• CVE-2017-5181Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-5182Remote Manager in Open Enterprise Server (OES) allows unauth…
• CVE-2017-5183NetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when con…
• CVE-2017-5184A vulnerability was discovered in NetIQ Sentinel Server 8.0 …