Product:
Data Lakehouse
Summary
Dell Data Lakehouse contains an Improper Access Control vulnerability in versions prior to 1.6.0.0. A high privileged attacker with remote access could exploit this vulnerability, leading to elevation of privileges. This critical vulnerability may result in unauthorized access, compromising system integrity and customer data. Dell recommends upgrading to the latest version as soon as possible.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.1 | CVE-2025-46608 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and remote access can manipulate the access controls within the affected version of Dell Data Lakehouse. By leveraging this improper access control, the attacker can gain elevated privileges, allowing them to perform unauthorized actions within the system.
Affected Products
- Data Lakehouse: Versions prior to 1.6.0.0 are affected by the improper access control vulnerability.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Dell Data Lakehouse as soon as possible. This will ensure that the improper access control issue is resolved, thereby protecting system integrity and customer data from potential exploitation.