Disable creating users from incoming emails
Use the glide.user.trusted_domain property to specify the comma-separated list of trusted domains used in the creation of users from incoming emails.
An administrator can set the glide.pop3readerjob.create_caller system property to automatically create users from incoming emails. If set this property to the insecure value, the instance automatically creates users from incoming email. Each user created will have the same hardcoded default password which makes bypassing authentication through brute force easier.
Ensure that the glide.pop3readerjob.create_caller system property is set to false.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.pop3readerjob.create_caller |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | false |
| Default value | <none> |
| Fallback value | false |
| Category | Authentication |
| Security risk | - Severity score: 5.4 - CVSS rating: Medium - Security risk details: Allowing automatic user creation without strong password controls undermines authentication security and increases the likelihood of system compromise. |
| Functional impact | None |
| Dependencies and prerequisites | None |
To learn more about adding or creating a system property, see Add a system property.
Parent Topic:Authentication