Altitude Authentication Service and Communication Server Host Header Injection Vulnerability

A vulnerability exists in Altitude Authentication Service and Altitude Communication Server version 8.5.3290.0, where improper handling of the Host header in HTTP requests can lead to open redirection or phishing attacks. This vulnerability allows an attacker to redirect users to a malicious URL or alter the base URL, potentially causing them to inadvertently send login credentials to a fraudulent website.

Impact

Exploitation of this vulnerability could lead to phishing attacks, where users are tricked into providing sensitive information such as login credentials to a malicious website.