CVE-2025-36187 IBM Knowledge Catalog 信息泄露漏洞

# This PoC demonstrates checking for sensitive data in common log locations # Note: Actual paths depend on the specific IBM Knowledge Catalog installation. import os log_paths = [ "/var/log/ibm/knowledge_catalog/server.log", "/opt/ibm/knowledge_catalog/logs/application.log" ] sensitive_keywords = ["password", "token", "api_key", "secret"] print("[*] Simulating log scan for CVE-2025-36187...") for path in log_paths: if os.path.exists(path): print(f"[+] Found log file: {path}") try: with open(path, 'r', errors='ignore') as f: content = f.read() for keyword in sensitive_keywords: if keyword in content.lower(): print(f"[!] Potential sensitive data found containing keyword: {keyword}") except Exception as e: print(f"[-] Error reading file: {e}") else: print(f"[-] Log file not found: {path}")