CVE-2025-41083

Name of the Vulnerable Software and Affected Versions Altitude Authentication Service and Altitude Communication Server version 8.5.3290.0

Description A flaw exists in Altitude Authentication Service and Altitude Communication Server version 8.5.3290.0 that allows manipulation of the Host header in HTTP requests. This manipulation can lead to redirection to an arbitrary URL or modification of the base URL, potentially tricking users into submitting login credentials to a malicious website controlled by an attacker. The issue involves redirecting clients to attacker-controlled endpoints. The Host header is the vulnerable parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.