MailEnable up to 10.53 AUTH.TAB cleartext storage

Summaryinfo

A vulnerability marked as problematic has been reported in MailEnable up to 10.53. This issue affects some unknown processing of the file AUTH.TAB. This manipulation causes cleartext storage. This vulnerability is tracked as CVE-2025-34427. The attack is restricted to local execution. No exploit exists. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic was found in MailEnable up to 10.53. Affected by this vulnerability is an unknown code of the file AUTH.TAB. The manipulation with an unknown input leads to a cleartext storage vulnerability. The CWE definition for the vulnerability is CWE-312. The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. As an impact it is known to affect confidentiality. The summary by CVE is:

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.TAB with overly permissive filesystem access. A local authenticated user with read access to this file can recover all user passwords and super-admin credentials, then use them to authenticate to MailEnable services such as POP3, SMTP, or the webmail interface, enabling unauthorized mailbox access and administrative control.

The weakness was disclosed by Mushroomsecteam. It is possible to read the advisory at mailenable.com. This vulnerability is known as CVE-2025-34427 since 04/15/2025. The exploitation appears to be easy. Attacking locally is a requirement. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1555 according to MITRE ATT&CK.

Upgrading to version 10.54 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Mail Server Software

Name

• MailEnable

Version

• 10.0
• 10.1
• 10.2
• 10.3
• 10.4
• 10.5
• 10.6
• 10.7
• 10.8
• 10.9
• 10.10
• 10.11
• 10.12
• 10.13
• 10.14
• 10.15
• 10.16
• 10.17
• 10.18
• 10.19
• 10.20
• 10.21
• 10.22
• 10.23
• 10.24
• 10.25
• 10.26
• 10.27
• 10.28
• 10.29
• 10.30
• 10.31
• 10.32
• 10.33
• 10.34
• 10.35
• 10.36
• 10.37
• 10.38
• 10.39
• 10.40
• 10.41
• 10.42
• 10.43
• 10.44
• 10.45
• 10.46
• 10.47
• 10.48
• 10.49
• 10.50
• 10.51
• 10.52
• 10.53

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion