Lucene search
K

5 matches found

EUVD
EUVD
added 2025/12/10 9:31 p.m.3 views

EUVD-2025-202481

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.TAB with overly permissive filesystem access. A local...

6.8CVSS5.8AI score0.00003EPSS
Exploits0References4
OSV
OSV
added 2025/12/10 7:16 p.m.0 views

CVE-2025-34427

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.TAB with overly permissive filesystem access. A local...

7.8CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2025/12/10 7:16 p.m.2 views

CVE-2025-34427

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.TAB with overly permissive filesystem access. A local...

8.4CVSS0.00003EPSS
Exploits0References3
CVE
CVE
added 2025/12/10 6:24 p.m.10 views

CVE-2025-34427

Summary: CVE-2025-34427 affects MailEnable versions prior to 10.54, where credentials are stored in cleartext in AUTH.TAB with overly permissive filesystem access. A local authenticated user with read access to AUTH.TAB can recover all user passwords and super-admin credentials, then authenticate...

8.4CVSS5.9AI score0.00003EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/12/10 6:24 p.m.24 views

CVE-2025-34427 MailEnable < 10.54 Cleartext Credential Storage in AUTH.TAB

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.TAB with overly permissive filesystem access. A local...

8.4CVSS0.00003EPSS
Exploits0References3
Rows per page
Query Builder