An admin dashboard with http basic auth and weak credentials (admin / changeit) has been discovered. After disclosure it has been removed.