Vulners
Lucene search
Wipro Holmes Orchestrator 20.4.1 Report Disclosure Vulnerability
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2021-38147 | 29 Nov 202112:33 | – | circl |
 | Wipro Holmes Orchestrator 访问控制错误漏洞 | 22 Nov 202100:00 | – | cnnvd |
 | Wipro Holmes Orchestrator Access Control Error Vulnerability | 24 Nov 202100:00 | – | cnvd |
 | CVE-2021-38147 | 29 Nov 202107:42 | – | cve |
 | CVE-2021-38147 | 29 Nov 202107:42 | – | cvelist |
 | Wipro Holmes Orchestrator 20.4.1 - Information Disclosure | 10 Jun 202605:11 | – | nuclei |
 | CVE-2021-38147 | 29 Nov 202108:15 | – | nvd |
 | CVE-2021-38147 | 29 Nov 202108:15 | – | osv |
 | Wipro Holmes Orchestrator 20.4.1 Report Disclosure | 22 Nov 202100:00 | – | packetstorm |
 | Design/Logic Flaw | 29 Nov 202108:15 | – | prion |
10
# Exploit Title: Wipro Holmes Orchestrator 20.4.1 Unauthenticated Excel Report Download
# Exploit Author: Rizal Muhammed @ub3rsick
# Vendor Homepage: https://www.wipro.com/holmes/
# Version: 20.4.1
# Tested on: Windows 10 x64
# CVE : CVE-2021-38147
In the Wipro Holmes Orchestrator 20.4.1 application, if at some point some user has exported any of the Reports as excel, these files remain in the server. When an unauthenticated user attempts to access any of the below endpoints such files are downloaded. Details of the vulnerable endpoints and the information exposed by the reports from these endpoints are provided below.
User Report:-
API: http://HOLMES_ORCH_HOST:PORT/processexecution/DownloadExcelFile/User_Report_Excel
Exposed Information: Username, Email, Role, First Name, Last Name, User Level and User Domain of different users.
Domain Credentials Report:-
API: http://HOLMES_ORCH_HOST:PORT/processexecution/DownloadExcelFile/Domain_Credential_Report_Excel
Exposed Information: Domain Credential Names, Type, Domain Names
Other Endpoints:-
http://HOLMES_ORCH_HOST:PORT/processexecution/DownloadExcelFile/Process_Report_Excel
http://HOLMES_ORCH_HOST:PORT/processexecution/DownloadExcelFile/Infrastructure_Report_Excel
http://HOLMES_ORCH_HOST:PORT/processexecution/DownloadExcelFile/Resolver_Report_Excel
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
22 Nov 2021 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS 25
CVSS 3.17.5
EPSS0.70114