At a company I worked at recently, I ran across a Sharepoint site and wondered whether I could download data that I wasn’t supposed to see.
Now I understand the purpose of SharePoint and company intranets is to share data, but even then, some data should be restricted to a limited number of people.
So I decided to check (before doing things like this, you better know How to Stay Out of Jail).
Continue reading →
Like this:
Like Loading...
Filed under Audit, Excel, How to..., Security, Security Scout, Technology
Tagged as access, account, anonymous, authentication, database, download, excel, failure, intranet, lotus notes, permission, rights, risk, search, Security, sharepoint, stay out of jail
I recently downloaded the contents of a Lotus Notes Domino database to Excel without any access to the database. If you’ll recall, I do audit consulting, and was performing an audit at a Fortune 100 company.
Continue reading →
Like this:
Like Loading...
Filed under Audit, Excel, How to..., Security, Technology
Tagged as access, account, authentication, database, download, excel, intranet, lotus notes, rights, search
At a company I worked at recently, I ran across a Sharepoint site and wondered whether I could download data that I wasn’t supposed to see.
ITauditSecurity 