3 ms·

Usually they rely on some other mechanism for security. Like you can only access the portal admin page from the intranet or a few IP addresses. That has failed,

by GoToRO 7y ago

Usually they rely on some other mechanism for security. Like you can only access the portal admin page from the intranet or a few IP addresses. That has failed, not the fact that they didn't change the password.

notzuck 7y ago
Security only really works in layers. So yes, the password should have been changed too.
yreg 7y ago
I'd say that both of those mechanisms failed.