Upon initial installation or in the delivered configurations of a database management system, user and administration accounts are frequently not protected or only protected with publicly known passwords. This means these accounts can be misused. For example, an attacker may use publicly known login data to access a database management system as a user—or even as an administrator. The attacker will then be able to read, manipulate, or delete the configuration or the data stored.