low3.3
CVE-2025-57784
Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the managem…
Impact
Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the management client.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hiawatha-Webserver | Hiawatha | Version 11.7 |