Atlassian reveals critical flaws in almost everything it makes and touches

&gt; A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit this to log into Confluence and access all content accessible to users in the confluence-users group<p>A hardcoded password... are these guys for real?