Reply to post:

"using an exposed default password that let anyone who knew an admin account name to seize control of the underlying Jive application"

Call me cynical, but I find it hard to imagine this was an accident. It has backdoor written all over it.