CVE-2024-47481 Missing authorization in Dell Data Lakehouse

What is CVE-2024-47481?

CVE-2024-47481 is a medium-severity missing authorization vulnerability in Dell Data Lakehouse, published on 25 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service.

Weakness: CWE-284

Which versions are affected by CVE-2024-47481?

It affects 1 product.

Products include Dell Data Lakehouse.

How do I fix CVE-2024-47481?

No fix has been published for CVE-2024-47481 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2024-47481 being exploited?

There is no known exploitation of CVE-2024-47481 in the wild and no public exploit code.

Other vulnerabilities in Dell Data Lakehouse

• CVE-2024-37143 Path traversal in Dell Data Lakehouse Critical 10.0
• CVE-2025-46608 Privilege escalation in Data Lakehouse Critical 9.1
• CVE-2024-37144 Information disclosure in Dell Data Lakehouse High 8.2
• CVE-2024-38302 Information disclosure in Dell Data Lakehouse Medium 6.8
• CVE-2025-21110 Privilege escalation in Data Lakehouse Medium 6.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7hc4-q4r5-h48x.