Description
帆软报表和帆软BI /decision/login 接口可以爆破账号密码，如果使用规则偏弱的口令可能导致潜在的安全隐患
帆软报表存在弱口令漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnvd.org.cn/flaw/show/CNVD-2024-37222
https://help.fanruan.com/finereport/edition-view-62775-87.html
https://cn-sec.com/archives/2217499.html
https://zone.ci/aliyun/ali_nonvd/379216.html
https://www.sxxdckj.com/cms/a/fan-ruan-ruan-jian-you-xian-gong-si-shu-ju-jue-ce-xi-tong-cun-zai-ruo-kou-ling-lou-dong.html
https://avd.aliyun.com/detail?id=AVD-2024-1747915