Has Anyone notice the following?

1) Log-in to openwebmail with www.site1.com/webmail/ 
and authenticate with  a user belonging to the website 1. (i.e. USER1)

2) Now Log-in again to openwebmail with www.site1.com/webmail/
BUT this time with a user belonging to another website.(i.e. USER2)

Suprise! User 2 sees the emails belonging to User 1! 


Regards,

Dave.





_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security

Reply via email to