If there's a webservice running that accesses the database, you'll access the database (albeit indirectly) if you call that webservice.
But you can't just send some SOAP message to any old web server asking it to give you a full list of usernames and passwords from its authentication database.
We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.