Description
Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the management client.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hiawatha | Hiawatha Web server | 11.7 – ≤ 8.5 | — |