TikiWiki contains a flaw that may lead to an unauthorized password exposure. It is possible to gain access to cleartext passwords by selecting the 'users_users' table in mysql, which may lead to a loss of confidentiality.
Local Access Required
Loss of Confidentiality
Upgrade to version 1.7 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.