Frequently, functions that are not required are enabled in the default configuration of a database management system, which makes it easier for potential attackers to read or manipulate information in the adjacent database. In order to administer a DBMS without having to provide any authentication, an attacker may, for example, be able to establish a connection to an unused programming interface because the corresponding organisation has not changed the default installation. As a consequence, they may access the organisation's databases without authorisation.