Disable inbound emails for locked out users
Use the glide.pop3.process_locked_out property to control inbound email actions for locked out, active users.
The glide.pop3.process_locked_out system property controls inbound email actions for locked out users. If glide.pop3.process_locked_out is set to true, there may be an information disclosure as inbound emails would be received by users with locked accounts.
Ensure that the property glide.pop3.process_locked_out is set to false.
Note: Consider the security implications of allowing users from untrusted domains, and why they were locked out, before allowing emails from them to trigger inbound email actions.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.pop3.process_locked_out |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | false |
| Default value | <none> |
| Fallback value | false |
| Category | Access control |
| Security risk | - Severity score: 7.5 - CVSS rating: High - Security risk details: Allows locked-out users to continue submitting inbound emails that may create records or trigger workflows, posing a security risk by enabling potentially unauthorized actions. |
| Functional impact | None |
| Dependencies and prerequisites | None |
To learn more about adding or creating a system property, see Add a system property.
Parent Topic:Access control