acf-core shows system information to unauthenticated users
By default, general system health is shown to the “guest” user. This is fine for a corporate lan, but it lists uptime, free RAM, and kernel versions, and on an Internet Facing machine, that’s probably not good information to give out for free.
(see https://sp4.qcslink.com as an example, and think about what you could do with this info)
Recommendation: Make all general health info available to authenticated users only
(from redmine: issue id 233, created on 2010-01-04, closed on 2010-01-20)