Edison mail released an update with a bug which allowed users to access other user’s account and messages without password
Email by Edison is the simplified, customizable inbox experience that allows you to manage unlimited email accounts in a seamless way! Get emails faster, block spam, and never see an ad clogging up your inbox again.
The Edison Mail allows you to log in multiple mail accounts like Office 365, Yahoo Mail, AOL Mail, Hotmail, Outlook, MS Exchange, IMAP, Alto, Gmail, iCloud, Comcast, Verizon, AT&T, and more all in one application.
Edison mail launched a new feature that allowed users of the third-party email app to synchronize their accounts across their Apple devices, including the Mac and iPhone. The feature synchronized “email connections” between devices, but the feature had a sync bug that allowed users to access other user’s mail accounts and messages.
The company later confirmed the bug and said: “there was a flaw in the app experienced by a small percentage of our user base.”
After the discovery company rolled back the feature and notified the affected users. The affected users’ accounts were logged out from Edison Mail to avoid any further security flaws.
At 10:50 PM PST Friday evening a security bug was introduced for a small fraction of our iOS users. We have rolled that update back. All impacted users are being logged out and will need to re-login.
— Edison (@Edison_apps) May 16, 2020
If you use Edison Mail we would like to suggest you log out the mail accounts you are using on the app and clear the cache and main memory of the app to avoid any security flaw.