Tomahawk authentication timing attack due to usage of 'strcm… (CVE-2025-57784)

Summary

Tomahawk authentication timing attack due to usage of 'strcmp'

Original description

The description as published by the source.

Tomahawk auth timing attack due to usage of strcmp has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the management client.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web gitlab.com