IlohaMail versions 0.8.14-rc1 and below allow for unauthenticated remote retrieval of system configuration files.