CVE-2008-0410

MEDIUM · CVSS 5 EPSS 1.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2008-01-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2008-0410

Severity

MEDIUM

CVSS

EPSS

1.80%

Original NVD Description

HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%version%</id> in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL.