
Vulnerabilities
hMailServer API Flaw Allows Authenticated Users to Hijack Mail Routing
A missing authorization check in hMailServer 6.3.6 and earlier lets domain admins alter routing for other tenants, risking data diversion.
Everything Packet Tribune has reported about API security: 2 stories, newest first. Part of our Vulnerabilities coverage.

A missing authorization check in hMailServer 6.3.6 and earlier lets domain admins alter routing for other tenants, risking data diversion.

Most API flaws stem from poor access controls rather than complex code errors, leaving user data exposed through misconfigured digital doors.