If an end user accesses quarresults.aspx directly, they can see everyone's emails in the quarantine

Author: Luis Fernandes July 11, 2020 13:15

Versions / Builds Affected

2012 / 20120913

Status

Resolved

Problem Summary

If an end user accesses quarresults.aspx directly, they can see everyone's emails in the quarantine.

TT / JIRAID

433

How to Identify

When a user goes to access the ../MailEssentials/pages/quarresults.aspx page directly, they can see everyone's email in the quarantine even if they are not the admin.

Workaround / Fix Details

Upgrade customer to GFI MailEssentials 2015 or later

Required Actions