PT-2026-4738 · Unknown · Altitude Communication Server
CVE-2025-41082
·
Publicado
2026-01-26
·
Atualizado
2026-01-26
CVSS v4.0
6.9
Média
| Vetor | AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Altitude Communication Server (affected versions not specified)
Description
An issue exists in Altitude Communication Server related to the handling of HTTP requests. Inconsistent analysis of multiple HTTP requests over a single Keep-Alive connection, specifically utilizing Content-Length headers, can lead to a desynchronization between frontend and backend servers. This desynchronization may allow for request hiding, cache poisoning, or security bypass.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
HTTP Request/Response Smuggling
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Altitude Communication Server