CVE-2025-52373 Information

Jul 22, 2025 cve

Description

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.

Reference

https://github.com/hmailserver/hmailserver https://github.com/mojibake-dev/hMailEnum https://github.com/mojibake-dev/mojibake-CVE/blob/main/hMailServer/CVE-2025-52373.md

CNNVD-202507-2665 (Published: 2025-07-21)

Share on: