CVE-2025-52373 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hM…
Medium CVSS: 4.6

CVE-2025-52373

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.
Vendor
Hmailserver
Product
Hmailserver
CWE
CWE-321
Yayın Tarihi
2025-07-21 16:15:29
Güncelleme
2025-08-07 18:00:42
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-321 Hmailserver MEDIUM Hmailserver 2025

Referanslar

https://github.com/hmailserver/hmailserver https://github.com/mojibake-dev/hMailEnum https://github.com/mojibake-dev/mojibake-CVE/blob/main/hMailServer/CVE-2025-52373.md