Citeren Serveria Support <supp...@serveria.com>:

Yes, there is a tiny problem letting the attacker change this value back to yes and instantly get access to users' passwords in plain text. Apart from that - no problems at all. :)

If an attacker is able to modify your Dovecot configuration, you have bigger problems than leaking your users' password. Much bigger...

Reply via email to