A service or application has a backdoor password that was placed there by the developer.
CVSS Metrics