CVE-2024-58387

Summary

The Inspur Haiyue HCM Cloud system has an arbitrary file read vulnerability in its model report file download endpoint, allowing attackers to read any file on the server's filesystem without authentication. This flaw enables disclosure of sensitive system files, database contents, and configuration data.

Exploitability

The vulnerability is easily exploitable with no authentication required, allowing attackers to traverse the filesystem using crafted path parameters in the download endpoint.

Blast radius

If exploited, this vulnerability could lead to widespread exposure of critical system files, database credentials, and application configuration, potentially enabling further attacks on the underlying infrastructure.

Detection

Defenders should monitor for unusual GET requests to /api/model_report/file/download with path traversal parameters in access logs, particularly when index parameter contains ../ sequences or when ext parameter references system files like /etc/passwd.

Prioritized remediation

Immediate remediation requires upgrading to version 2.590 or later, as specified in the vendor advisory for CVE-2024-58387.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.