PT-2025-33638 · Portabilis · Portabilis I-Diario

Princival · Published 2025-08-18 · Updated 2025-08-18 · CVE-2025-9109

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Portabilis i-Diario versions prior to 1.5.1

Description: A security flaw has been discovered in Portabilis i-Diario. The vulnerability affects an unknown functionality of the file /password/email within the Password Recovery Endpoint component. This results in a response discrepancy, and the attack can be launched remotely. Exploitation is considered difficult, despite the public release of an exploit.

Recommendations: Update Portabilis i-Diario to version 1.5.1 or later.

Fix

Side Channel Attack

Weakness Enumeration

CWE-204

CWE-203

Related Identifiers

CVE-2025-9109

Affected Products

Portabilis I-Diario

References · 9

• https://osv.dev/vulnerability/CVE-2025-9109 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9109 · Security Note
• https://twitter.com/VulmonFeeds/status/1957329139066699816 · Twitter Post
• https://vuldb.com/?ctiid.320431 · Note
• https://t.me/cveNotify/132625 · Telegram Post
• https://vuldb.com/?id.320431 · Note
• https://twitter.com/CVEnew/status/1957335825600983106 · Twitter Post
• https://vuldb.com/?submit.627926 · Note
• https://t.me/CVEtracker/30262 · Telegram Post