H3C SecCenter Path Traversal Vulnerability in File Content Function

A critical path traversal vulnerability has been identified in H3C SecCenter versions through 20250513. The issue arises in the fileContent function of the /cfgFile/fileContent path, where improper handling of the filePath argument allows for directory traversal. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for path traversal, potentially leading to unauthorized access to files outside the intended directory.