Insufficient protection mechanisms in the Health Module may lead to partial information disclosure.
CWE-306