CVE-2024-58387

Received Received - Intake

Arbitrary File Read in Inspur Haiyue HCM Cloud

Publication date: 2026-09-30

Last updated on: 2026-09-30

Assigner: VulnCheck

Description

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as /api/model_report/file/download?index=/&ext=<path> to traverse the filesystem and disclose sensitive files including /etc/passwd, application database files, and system configuration files. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-11-04 .

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-09-30

Generated

2026-10-01

AI Q&A

2026-10-01

EPSS Evaluated

N/A

NVD

CVE-2024-58387

EUVD

EUVD-2024-55778

Affected Vendors & Products

Vendor	Product	Version / Range
inspur	haiyue_hcm_cloud	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

Inspur Haiyue HCM Cloud has an arbitrary file read vulnerability in the /api/model_report/file/download endpoint. Unauthenticated remote attackers can read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests to traverse the filesystem and disclose sensitive files like /etc/passwd, application database files, and system configuration files.

Detection Guidance

To detect this vulnerability, check if your Inspur Haiyue HCM Cloud system exposes the /api/model_report/file/download endpoint. Use tools like curl to send test requests such as curl 'http://<target>/api/model_report/file/download?index=/&ext=/etc/passwd' and observe if sensitive files are returned.

Impact Analysis

This vulnerability allows attackers to read sensitive files on the system, potentially exposing confidential data such as user credentials, system configurations, or application databases. This could lead to further attacks like data breaches or unauthorized access.

Mitigation Strategies

Immediately restrict access to the /api/model_report/file/download endpoint via network firewalls or WAF rules. Apply vendor patches or updates if available. Monitor network traffic for unusual requests targeting this path.

Hi! I’m here to help you understand CVE-2024-58387. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70