The OA system of a second-level unit of China Coal Group can be infiltrated, resulting in a large number of commercial secrets leaked.

The OA system of a second-level unit of China Coal Group can be infiltrated, resulting in a large number of commercial secrets leaked.

Strong patriotism

An Internet public OA system of a second-level enterprise of China Coal Group, and attackers can easily access and obtain a large number of sensitive commercial secrets due to brute force cracking and weak passwords, including employee Address Book, company email, attendance, salary, company deposit, contract documents, and process approval. Because it is too harmful, it is not the unit address.

1. Enter the OA system:

2. Use the domino vulnerability to obtain employee information:

3. Fund approval system

4. Company deposits

5. Financial email

Solution:

1. Important systems should not be placed on the Internet. 2. Modify weak passwords. 3. Prohibit brute force enumeration.