GROW

config

Locked out users processing inbound email actions

This issue is found automatically by CODA.
Time to fix: 30min

What is a System Property?

A System Property in ServiceNow serves as a configuration setting, storing crucial information related to the system. These properties cover a broad range of details, including parameters for system behavior, performance, and security.

An example is the System Property glide.pop3.process_locked_out, which controls whether locked-out users can initiate Inbound Actions or reset their passwords.

Why is this an issue?

Activating the glide.pop3.process_locked_out property can introduce security risks and potential misuse of system functionalities. Enabling this property allows locked-out users to trigger Inbound Actions, such as resetting their password or sending emails for assistance. The potential issues with activating this property include:

  • Security Concerns: Allowing locked-out users to trigger inbound actions poses a security risk, as it opens up opportunities for unauthorized access or manipulation of the system.

  • Unauthorized Access: Enabling this property may provide a way for locked-out users to perform actions that are typically restricted during account lockout, potentially compromising the instance integrity.

  • Reports Integrity: Allowing locked-out users to initiate inbound actions can compromise the integrity of audit trails and accountability within the system.

How do I fix it?

To fix this issue, it is necessary to set the glide.pop3.process_locked_out property to false. To do so, follow these steps:

  1. In the Filter Navigator, type and enter sys_properties.list.

  2. Search for glide.pop3.process_locked_out.

  3. Set Value column to false.