There are no details as to how long the server was password-less, but it was discovered by a security researcher and has now been secured