Tomahawk authentication timing attack due to usage of 'strcm… (CVE-2025-57784)

Résumé

Tomahawk authentication timing attack due to usage of 'strcmp'

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Tomahawk auth timing attack due to usage of strcmp has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the management client.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
web gitlab.com