MailEnable up to 10.53 AUTH.SAV cleartext storage

Summaryinfo

A vulnerability described as problematic has been identified in MailEnable up to 10.53. Impacted is an unknown function of the file AUTH.SAV. Such manipulation leads to cleartext storage. This vulnerability is listed as CVE-2025-34428. The attack must be carried out locally. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in MailEnable up to 10.53. Affected by this issue is an unknown code block of the file AUTH.SAV. The manipulation with an unknown input leads to a cleartext storage vulnerability. Using CWE to declare the problem leads to CWE-312. The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. Impacted is confidentiality. CVE summarizes:

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local authenticated user with read access to this file can recover all user passwords and super-admin credentials, then use them to authenticate to MailEnable services such as POP3, SMTP, or the webmail interface, enabling unauthorized mailbox access and administrative control.

The weakness was presented by Mushroomsecteam. The advisory is shared for download at mailenable.com. This vulnerability is handled as CVE-2025-34428 since 04/15/2025. The exploitation is known to be easy. The attack needs to be approached locally. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1555.

Upgrading to version 10.54 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Mail Server Software

Name

• MailEnable

Version

• 10.0
• 10.1
• 10.2
• 10.3
• 10.4
• 10.5
• 10.6
• 10.7
• 10.8
• 10.9
• 10.10
• 10.11
• 10.12
• 10.13
• 10.14
• 10.15
• 10.16
• 10.17
• 10.18
• 10.19
• 10.20
• 10.21
• 10.22
• 10.23
• 10.24
• 10.25
• 10.26
• 10.27
• 10.28
• 10.29
• 10.30
• 10.31
• 10.32
• 10.33
• 10.34
• 10.35
• 10.36
• 10.37
• 10.38
• 10.39
• 10.40
• 10.41
• 10.42
• 10.43
• 10.44
• 10.45
• 10.46
• 10.47
• 10.48
• 10.49
• 10.50
• 10.51
• 10.52
• 10.53

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion