Altitude Communication Server Illegal HTTP Request Traffic Vulnerability Allowing Cache Poisoning and Security Bypass

A vulnerability has been identified in Altitude Communication Server, related to improper handling of multiple HTTP requests over a single Keep-Alive connection. This issue arises from an inconsistent analysis of Content-Length headers, leading to a desynchronization of requests between frontend and backend servers. As a result, the vulnerability could be exploited to hide requests, poison caches, or bypass security measures.

Impact

Exploitation of this vulnerability could result in request desynchronization between frontend and backend servers, allowing for request hiding, cache poisoning, or security bypass.