The default configuration of Crimson 3.1 (Build versions before 3119.001) allows a user to be able to read and modify the database without authentication.
redlion crimson 3.1