CVE-2025-31975 HCL BigFix服务横幅信息泄露漏洞

import requests # Target URL of the HCL BigFix Service Management target_url = "http://target-server:port" try: # Send a basic HTTP GET request response = requests.get(target_url, timeout=10) # Extract headers that might leak version info server_banner = response.headers.get('Server') x_powered_by = response.headers.get('X-Powered-By') set_cookie = response.headers.get('Set-Cookie') print("[+] Response Headers:") print(f"Server: {server_banner}") print(f"X-Powered-By: {x_powered_by}") if server_banner and "BigFix" in server_banner: print("[!] Potential Information Disclosure found in Server header.") except requests.exceptions.RequestException as e: print(f"[-] Error connecting to target: {e}")