The vulnerability of the auth_svc function in the Caldera automated system for emulating hacker actions allows a hacker to increase their privileges.

The vulnerability of the authsvc function in the Caldera Calibur emulation system is related to errors in processing the “localhost” string in the HTTP header of the host. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

CVE-2020-10807

authsvc in Caldera before 2.6.5 allows authentication bypass for REST API requests via a forged "localhost" string in the HTTP Host header...