Skip to content
Submit incident
AII-1002-49717
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Dell Data Lakehouse CVE-2024-47481 improper access control vulnerability

Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0 contain an improper access control vulnerability (CVE-2024-47481) that could be exploited by unauthenticated attackers with local access. Dell released a security update to remediate the issue.

25 October 2024 · Dell · Security and cyberattacks
25 October 2024

Drafted by Raidu Incident Detection, an automated system.

AII-1002-49717View source ↗
Quick facts
Organization
Dell (subject)
Category
Security and cyberattacks
Country
United States
Source
dell.com
Date
25 October 2024
Drafted by
Raidu Incident Detection

What happened

Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0 contain an improper access control vulnerability tracked as CVE-2024-47481.

An unauthenticated attacker with local access could potentially exploit this vulnerability.

Reported impact

The vulnerability could lead to unauthorized access to the affected system.

Governance controls

Dell released a security update (DSA-2024-419) to remediate the vulnerability in affected versions of Dell Data Lakehouse System Software.

Classification

Organization
Dell (subject)
Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Country
United States
Harm status
Potential harm
Intent
Unintentional
Timing
Unknown
Consequences
None recorded

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

dell.com
https://www.dell.com/support/kbdoc/en-us/000240535/dsa-2024-419-security-update-for-dell-data-lakehouse-system-software-for-multiple-third-party-component-vulnerabilities