CVE-2026-34487 Apache Tomcat日志信息泄露漏洞

import re def check_log_for_token(log_file_path): # Regex pattern to identify Kubernetes Bearer Token token_pattern = r'"authorization".*"Bearer\s+([A-Za-z0-9\._-]+)"' print(f'[*] Analyzing log file: {log_file_path}') try: with open(log_file_path, 'r', encoding='utf-8', errors='ignore') as f: for line_num, line in enumerate(f, 1): if 'cloud membership' in line.lower(): match = re.search(token_pattern, line) if match: print(f'[!] Vulnerability Confirmed at line {line_num}') print(f'[!] Exposed Token: {match.group(1)}') return True print('[-] No sensitive information found in the specified context.') return False except FileNotFoundError: print('[-] Error: Log file not found.') return False # Execute check # check_log_for_token('/usr/local/tomcat/logs/catalina.out')