---
id: CVE-2025-34428
title: >-
  MailEnable versions prior to 10.54 contain a cleartext storage of credentials
  vulnerability that can lead to local credential compromise and account
  takeover
summary: >-
  MailEnable versions prior to 10.54 contain a cleartext storage of credentials
  vulnerability that can lead to local credential compromise and account
  takeover. The product stores user and administrative passwords in plaintext
  within AUTH.…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-312
vendor: mailenable
product: mailenable
affected:
  - mailenable < 10.54
patched:
  - mailenable 10.54
published: '2025-12-10'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T21:10:00.183'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-34428'
references:
  - url: 'https://mailenable.com/Standard-ReleaseNotes.txt'
    label: disclosure@vulncheck.com
  - url: 'https://www.mailenable.com/'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/mailenable-cleartext-credential-storage-in-auth-sav
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.0012
epssPercentile: 0.01686
ingestedAt: '2026-10-14T21:57:04.791Z'
---

## Overview

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local authenticated user with read access to this file can recover all user passwords and super-admin credentials, then use them to authenticate to MailEnable services such as POP3, SMTP, or the webmail interface, enabling unauthorized mailbox access and administrative control.

## Affected

- `mailenable < 10.54`

## Remediation

Upgrade past the affected range:

- `mailenable 10.54`