CVE-2025-52373

4.6MEDIUM

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.

发布于: 7/21/2025更新于: 8/7/2025
在NVD查看在MITRE查看

描述

Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.

AI分析AI驱动

受影响产品

hmailserverhmailserver
5.6.9
hmailserverhmailserver
5.8.6

参考资料