An unauthorized access to a Netease system causes Intranet penetration

A Netease system is not authorized to access, resulting in access to some internal systems or penetration to the Intranet.
Test starts from here, http: // 123.125.50.162: 3000.
The system is Jenkins (software test) and logon verification is not set.
 
 
 
 
In the mailbox settings, the password of the mailbox is cracked.
 
 
 
 
This account can be used to log on to some internal Netease systems, such as Bugzilla, QA, OA, and forums.
 
 
 
 
After logging on to Bugzilla, you can add yourself as an administrator and have System Management permissions. The Bug involves all mailbox systems. 0.0
 
 
 
 
OA system of the software testing department. Nothing except test needs.
 
 
 
 
Internal company forum. DZ7.0, no WAP module.
 
 
 
 
Because it is an email account, the email contains the user name and password of some test machines, including 218.107.63.245 and 218.107.63.248.
 

Solution:

1. added user authentication for Jenkins.
2. dynamic passwords are recommended.