Insecure default settings, incomplete or ad hoc configurations, and open cloud storage.
MITRE. (n.d.). Common Weakness Enumeration (CWE).