High · published December 11, 2025
⚡ MailEnable versions before 10.54 are playing a risky game with plaintext credentials! Anyone with access could easily scoop up admin passwords like candy. 🍭 This vulnerability is akin to leaving the keys to a high-security vault under a doormat. A local user with read access to the AUTH.SAV file can simply grab all the passwords without any effort—like picking up the keys without a second thought! An attacker can gain unauthorized access to user accounts and even super-admin privileges, potentially leading to the complete takeover of MailEnable services. This means they could log into mailboxes, manipulate emails, and wreak havoc on your entire email infrastructure—absolutely devastating!
This vulnerability is akin to leaving the keys to a high-security vault under a doormat. A local user with read access to the AUTH.SAV file can simply grab all the passwords without any effort—like picking up the keys without a second thought! This vulnerability allows local authenticated users to recover all user and admin passwords stored in plaintext within the AUTH.SAV file due to overly permissive filesystem access. Consequently, they can authenticate to MailEnable services like POP3, SMTP, or webmail, gaining unauthorized access.
An attacker can gain unauthorized access to user accounts and even super-admin privileges, potentially leading to the complete takeover of MailEnable services. This means they could log into mailboxes, manipulate emails, and wreak havoc on your entire email infrastructure—absolutely devastating! Immediately upgrade MailEnable to version 10.54 or later to eliminate this vulnerability. Additionally, review filesystem permissions to ensure sensitive files are properly secured and inaccessible to unauthorized users. 🔒 You've got this! Fixing this issue is straightforward—secure your MailEnable and keep those vault keys out of reach! 🔐
| Product | Versions | Fixed in |
|---|---|---|
| mailenable/mailenable | < 10.54 | 10.54 |