A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.
CWE-732