An internal Azure-hosted server was left without password protection.