Atlassian Hardcoded a Password

    User: disabledsystemuser
    Username: disabledsystemuser
    Email: dontdeletethisuser@email.com

Wow pretty bad. If I was an administrator I would definitely think this account wouldn't actually work for logging in.

Why does it feel like every second week there's some critical Atlassian vulnerability being disclosed...

From my experience, most of the times these kind of vulnerabilities stem from companies taking shortcuts to enable easy on-boarding of customers on their systems.