CVE-2020-4071

CVE-2020-4071 describes a timing attack vulnerability in django-basic-auth-ip-whitelist versions prior to 0.3.4, affecting websites using basic authentication. This flaw allows an attacker on the local network to potentially deduce credentials by timing character-by-character string comparisons during authentication. The vulnerability is rated as Low severity (CVSS 2.4) due to its limited attack vector (physical/local network access) and low impact (confidentiality). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.