medium4.6
CVE-2025-52373
Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from h…
Impact
Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hmailserver | Hmailserver | Versions 5.6.9, 5.8.6 |