If anonymous read enabled, it's possible to read the database file directly without logging in.
NVD-CWE-noinfo