manager icon indicating copy to clipboard operation
manager copied to clipboard

Login security emails are send to wrong email with sub-accounts

Open FlorianLudwig opened this issue 4 years ago • 5 comments

Describe the bug On login a notification is sent to the accounts email address. In case of a sub-account this is sent to the main account (without an indication that the login is through a sub account).

To Reproduce Steps to reproduce the behavior:

  1. Create a sub account
  2. Login with sub account
  3. check emails

Expected behavior Notification email should go to subaccounts email.

FlorianLudwig avatar May 27 '20 10:05 FlorianLudwig

Hi @FlorianLudwig! Thanks for reporting this issue.

In order to be able to reproduce the issue, could you please confirm URL used to log in?

Thank you

antleblanc avatar Jun 01 '20 13:06 antleblanc

Hi @antleblanc,

do you mean like

https://www.ovh.com/auth/?action=gotomanager&from=https://www.ovh.de/&ovhSubsidiary=de

?

FlorianLudwig avatar Jun 01 '20 16:06 FlorianLudwig

Hi @antleblanc have been able to reproduce this issue?

FlorianLudwig avatar Jul 22 '20 12:07 FlorianLudwig

Hi @antleblanc,

do you mean like

https://www.ovh.com/auth/?action=gotomanager&from=https://www.ovh.de/&ovhSubsidiary=de

?

Yes! That's perfect! Thank you!

Hi @antleblanc have been able to reproduce this issue?

Yes we are to reproduce this issue.

The Manager application itself doesn't send any emails so I have contact the right team internally to notify them and I will keep you posted.

antleblanc avatar Jul 24 '20 13:07 antleblanc

hello, Login Notification sent to email are important security measure frequently used. An example how the text inside the login notification email should be: "There was a successful login to Manager, using (nic-handle) from (IP address). If this was not you please contact us immediately, change password and ....)" Does OVH Manager support login notification sent to the account email address? It seems not.

Maurozio avatar Jun 15 '21 07:06 Maurozio