Reaching database over EBS

Reaching database over EBS with apps user though you do not have the password! It certainly creates high level of security risk. I will get more detail about it if i can; how to do and how to prevent? While database passwords are controlled strictly this is not easy to decipher. After required establishment all you need to do is (any button combinations developer defines, in the case: ctrl+shift+F7 + ctrl+shift+F8) in the right form..