In Knowage up to and including 6.1.1, an unauthenticated user can bypass access controls and access the entire application.
eng knowage