Not changing privileged user passwords

All standard users created by Oracle have associated passwords. The two primary DBA accounts, SYS and SYSTEM, have (unfortunately) well-documented passwords. Most break-ins into Oracle databases are through one of these accounts, where the initial passwords provided with the installed systems have never been changed.

Get Oracle Database Administration: The Essential Refe now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.