A penetration test shows that almost all database servers were able to be compromised through a default database user