A configuration oversight exposed hundreds of websites to unauthorized access. One attached to the Trump campaign was among them.