← Back

CVE-2025-52372

nvd nist
Published: Jul 21, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.1
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.5 / Impact: 2.5
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components.

Affected (2)

Hmailserver
1 product
Hmailserver
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Hmailserver
Hmailserver
Version 5.6.9 beta
Hmailserver
Version 5.8.6

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (3)

Source: cve@mitre.org
Product
Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
ExploitThird Party Advisory

Timeline

No history available yet.