[
https://issues.apache.org/jira/browse/JAMES-1504?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13643568#comment-13643568
]
Eric Charles commented on JAMES-1504:
-------------------------------------
That's bad.. same for imap.
I will fix that tomorrow (not possible for me today).
Thx, Eric
> POP3 AUTHENTIFICATION
> ---------------------
>
> Key: JAMES-1504
> URL: https://issues.apache.org/jira/browse/JAMES-1504
> Project: James Server
> Issue Type: Bug
> Components: POP3Server
> Affects Versions: 3.0.0-beta5
> Environment: Windows 7,JDK7
> Reporter: 杨勐
> Priority: Critical
> Labels: security
> Attachments: screenshot-1.jpg, screenshot-2.jpg
>
>
> any user(even though it doesn't exist) with any password can login into
> james-3.0-beta5-snapshot and so can get any user's mail without password
> authentication..
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
