Skip to content
Submit incident
AII-1002-49729
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Dell Data Lakehouse SQL injection vulnerability CVE-2024-47483

Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0 contain an SQL injection vulnerability that an unauthenticated attacker with local access could exploit to disclose information. Dell released a security update to address the vulnerability.

25 October 2024 · Dell · Security and cyberattacks
25 October 2024

Drafted by Raidu Incident Detection, an automated system.

AII-1002-49729View source ↗
Quick facts
Organization
Dell (subject)
Category
Security and cyberattacks
Source
dell.com
Date
25 October 2024
Drafted by
Raidu Incident Detection

What happened

Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0 contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.

An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to information disclosure.

Reported impact

The vulnerability could lead to information disclosure. The CVSS Base Score is 2.9, indicating low severity.

Governance controls

Dell released a security update (DSA-2024-419) providing remediation for the vulnerability.

Classification

Organization
Dell (subject)
Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Harm status
Potential harm
Intent
Unintentional
Timing
Unknown
AI systems
Dell Data Lakehouse

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

dell.com
https://www.dell.com/support/kbdoc/en-us/000240535/dsa-2024-419-security-update-for-dell-data-lakehouse-system-software-for-multiple-third-party-component-vulnerabilities