Incorrect Access Control
6.8.1
≥Android 7.0
When obtaining alarm information, the device ID is included in the request, The picture in the response is in the Location field
After changing the device ID, you can get the image URL of the corresponding device
With this URL, you can access the alarm image without permission
