User bypassing disabled features?

esaesa

• November 25, 2017 02:30

Hi In feature manager i disabled the feature of "Email Filters". now it is not exist in the menu of webmail. but when the logged in user change the url ........../webmail/paper_lantern/index.html to ........./webmail/paper_lantern/mail/filters/editfilter.html?account=&filtername= he can access to the feature gui. Is is a security issue?

• 

  cPanelJackson

  • November 28, 2017 16:01

  Hi there, I have opened CPANEL-17107 to address this issue, and you should see it mentioned in our changelogs once a fix is available. In the future, potential security issues should be reported to security@cpanel.net. Thanks!

  0

Please sign in to leave a comment.