John Sefler of Red Hat reports: Under heavy load Candlepin may experience timeouts resulting in Java exception errors that can contain sensitive information. This only affects sites using candlepin with extremely heavy loads, as such Satellite 6 and SAM 1 are not affected.