CVE-2025-34428: MailEnable < 10.54 Cleartext Credential Storage in AUTH.SAV
MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local authenticated user with read access to this file can recover all user passwords and super-admin credentials, then use them to authenticate to MailEnable services such as POP3, SMTP, or the webmail interface, enabling unauthorized mailbox access and administrative control.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34428?
CVE-2025-34428 is considered a high severity vulnerability due to the risk of local credential compromise and potential account takeover.
How do I fix CVE-2025-34428?
To fix CVE-2025-34428, upgrade MailEnable to version 10.54 or later, where this vulnerability is addressed.
What impact does CVE-2025-34428 have on security?
CVE-2025-34428 allows unauthorized access to plaintext credentials, leading to possible unauthorized access to user accounts.
Which versions of MailEnable are affected by CVE-2025-34428?
MailEnable versions prior to 10.54 are affected by CVE-2025-34428.
What is the main cause of CVE-2025-34428?
CVE-2025-34428 is caused by the cleartext storage of credentials in the AUTH.SAV file with overly permissive filesystem access.