What is CVE-2021-38147?

CVE-2021-38147 is a vulnerability in N/a. Published 2021-11-29.

Is CVE-2021-38147 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2021-38147

Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadE…

EPSS: 0.787 (99.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

www.wipro.com/holmes/ (x_refsource_MISC)
packetstormsecurity.com/files/165039/Wipro-Holmes-Orchestrator-20.4.1-Report-Di… (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-38147?: CVE-2021-38147 is a vulnerability in N/a. Published 2021-11-29.
Is CVE-2021-38147 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.