In Knowage up to and including 6.1.1, an authenticated user that accesses the users page will obtain all user password hashes.
knowage-suite knowage