VULNERABILITY INTELLIGENCE
CVE-2008-0408
CVSS score6.4 MEDIUM
EPSS probability1.71%
CISA KEVNot currently listed
Published2008-01-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Description
HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of this text during HTTP Basic Authentication.
Weakness classification
- CWE-287: Improper Authentication