If anonymous read enabled, it's possible to read the database file directly without logging in.
apache archiva