[JAMES-89] Adding users without any security check

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 2.1
• Component/s: UsersStore & UsersRepository
• Environment: Operating System: Windows NT/2K; Platform: PC
• Bugzilla Id: 17241
• Assignee: Unassigned
• Reporter: Stefano Toparini
• Created: 20/Feb/03 18:55
• Updated: 06/Jun/04 21:02
• Resolved: 06/Jun/04 21:02

Description

I found it's possible to add James users without connecting via telnet.

On my James server (with Apache and Tomcat) and with a specific URL to
localhost, through Phoenix/MX4J interface, I can add user without any security
check.

Contact me for more precise informations

Bye,
Stefano