CVE-2008-0407

HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication…

published January 28, 2008

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication succeeded, which might make it more difficult for an administrator to determine who made a remote request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01566 · 75.0th percentile
Published
2008-01-28T23:00Z
EPSS history
Timeline
  • 28 JAN 23:00Z
    HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whether authentication…
    cvelistv5