CVE-2020-9389

A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames.

• CWE-203

• https://support.squaredup.com/hc/en-us/articles/360017255858Broken Link, Vendor Advisory
• https://support.squaredup.com/hc/en-us/articles/360019427238-CVE-2020-9389-Username-enumeration-possible-via-a-timing-attackBroken Link, Vendor Advisory
• https://support.squaredup.com/hc/en-us/articles/360017255858Broken Link, Vendor Advisory
• https://support.squaredup.com/hc/en-us/articles/360019427238-CVE-2020-9389-Username-enumeration-possible-via-a-timing-attackBroken Link, Vendor Advisory

Published

Feb 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9383An issue was discovered in the Linux kernel 3.16 through 5.5…7.1
• CVE-2020-9384An Insecure Direct Object Reference (IDOR) vulnerability in …8.8
• CVE-2020-9385A NULL Pointer Dereference exists in libzint in Zint 2.7.1 b…7.5
• CVE-2020-9386In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19…4.3
• CVE-2020-9387In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, acc…4.3
• CVE-2020-9388CSRF protection was not present in SquaredUp before version …6.5
• CVE-2020-9390SquaredUp allowed Stored XSS before version 4.6.0. A user wa…5.4
• CVE-2020-9391An issue was discovered in the Linux kernel 5.4 and 5.5 thro…5.5
• CVE-2020-9392An issue was discovered in the pricing-table-by-supsystic pl…7.3
• CVE-2020-9393An issue was discovered in the pricing-table-by-supsystic pl…6.1
• CVE-2020-9394An issue was discovered in the pricing-table-by-supsystic pl…8.8
• CVE-2020-9395An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL…8