Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents content-level security protection. There is an information leakage vulnerability in the electronic document security management system of Beijing Yisetong Technology Development Co., Ltd, which can be exploited by attackers to obtain user passwords.