[asterisk-bugs] [JIRA] (ASTERISK-26762) Email notifications sent to wrong emails

[Asterisk Team (JIRA)]

    [ https://issues.asterisk.org/jira/browse/ASTERISK-26762?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=234970#comment-234970 ] 

Asterisk Team commented on ASTERISK-26762:
------------------------------------------

Thanks for creating a report! The issue has entered the triage process. That means the issue will wait in this status until a Bug Marshal has an opportunity to review the issue. Once the issue has been reviewed you will receive comments regarding the next steps towards resolution.

A good first step is for you to review the [Asterisk Issue Guidelines|https://wiki.asterisk.org/wiki/display/AST/Asterisk+Issue+Guidelines] if you haven't already. The guidelines detail what is expected from an Asterisk issue report.

Then, if you are submitting a patch, please review the [Patch Contribution Process|https://wiki.asterisk.org/wiki/display/AST/Patch+Contribution+Process].

> Email notifications sent to wrong emails
> ----------------------------------------
>
>                 Key: ASTERISK-26762
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-26762
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Applications/app_voicemail
>    Affects Versions: 11.19.0
>            Reporter: Don Hunter
>
> We are having serious (privacy) issues of voicemail messages being sent to the wrong email address.  This is occurring many times a day (based on reports)... but could be occurring more frequently.
> The contents (name, phone, voicemail) are all accurate...
> Even the name of the person is accurate.
> However, the email is for another user, not the one it should be.  
> We have finally tracked down the cause and can duplicate the issue.
> If a voicemail is being triggered for email notification at the same time a user is updating their voicemail password, then emails are going to the wrong address.
> Note that all details in the notification are accurate, but the email address is wrong.. this the notification (and message) are sent to the wrong person (extremely bad).
> We noticed that the voicemail.conf file was updating, yet we were not doing any reloads.
> It took some time but we started watching the times the file changed and reports of the incorrect emails.
> We then clicked as to the issue andcan confirm that saving a voicemail message (with email notification) and changing a voicemail password at the same time duplicates the issue.
> Our voicemail.conf file is currently (size): 255905



--
This message was sent by Atlassian JIRA
(v6.2#6252)