Wipro Holmes Orchestrator 20.4.1 - Information Disclosure Detection

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

PT-2021-21967

Name of the Vulnerable Software and Affected Versions: Wipro Holmes Orchestrator version 20.4.1 20.4.1 02 11 2020 Description: The issue allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to...