CVE-2024-38302CWE-311

Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data vulnerability in the DDAE (Starburst)

Medium · published July 18, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data vulnerability in the DDAE (Starburst). A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00096 · 0.7th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2024-07-18T15:51Z
EPSS history
Timeline
  • 18 JUL 15:51Z
    Dell Data Lakehouse, version(s) 1.0.0.0, contain(s) a Missing Encryption of Sensitive Data vulnerability in the DDAE (Starburst)
    cvelistv5