CVE-2025-9031 MEDIUM

CVE-2025-9031: Timing-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web

Vendor Divvydrive Information Technologies Inc.
Product DivvyDrive Web
Weakness CWE-208
Published September 24, 2025
Last update June 5, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive Web allows Cross-Domain Search Timing. This issue affects DivvyDrive Web: from 4.8.2.2 before 4.8.2.15.

Key dates

02Disclosure timeline

September 24, 2025 CVE published
June 5, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-23892 OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication CVE-2017-20240 Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks CVE-2026-48859 SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration CVE-2021-26314 AMD Speculative execution with Floating-Point Value Injection CVE-2026-47373 Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks