John Sefler of Red Hat reports:
Under heavy load Candlepin may experience timeouts resulting in Java exception
errors that can contain sensitive information. This only affects sites using
candlepin with extremely heavy loads, as such Satellite 6 and SAM 1 are not
affected.