Description
BigAnt的 loginByToken 接口存在逻辑错误，可导致权限绕过以任意用户身份登录进系统，从而造成系统敏感信息泄露，甚至系统权限丢失。
大蚂蚁 (BigAnt) 即时通讯系统权限绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://mrxn.net/jswz/bigant-loginByToken-authbypass.html
https://www.gsdzj.gov.cn/info/1033/12199.htm
https://avd.aliyun.com/detail?id=AVD-2012-6274
https://vulncheck.com/blog/bigant-cve-2025-0364
https://gbhackers.com/bigant-server-vulnerability/
https://www.kb.cert.org/vuls/id/990652
https://cn-sec.com/archives/3922830.html