| Package | Affected versions | Patched versions |
|---|---|---|
| hiawatha | = 11.7 |
Tomahawk auth timing attack due to usage of `strcmp` has been identified in Hiawatha webserver version 11.7 which allows a local attacker to access the management client.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free