CNNVD-202512-1948 Information

CNNVD ID

CNNVD-202512-1948

CVE-2025-34427

  • CNNVD Published: 2025-12-10

Description (Chinese)

MailEnable是澳大利亚MailEnable公司的一个基于 Windows 的商业电子邮件服务器。 MailEnable 10.54之前版本存在安全漏洞,该漏洞源于明文存储凭据,可能导致本地凭据泄露和账户接管。

Description (English)

MailEnable is a Windows-based commercial e-mail server for MailEnable, Australia. There was a security loophole in the previous version of MailEnable 10.54, which originated from explicit storage certificates, which could lead to local evidence leaking and account taking over.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

MailEnable

Published

2025-12-10

Last Modified

2026-02-24

References

https://www.mailenable.com/ https://www.vulncheck.com/advisories/mailenable-cleartext-credential-storage-in-auth-tab https://mailenable.com/Standard-ReleaseNotes.txt https://access.redhat.com/security/cve/cve-2025-34427

Patch

https://mailenable.com/download.asp

Share on: