public and private community are accessable by default. public community leaks account infromation in cleartext.
vulners.com/securityvulns/securityvulns:doc:4293
vulners.com/securityvulns/securityvulns:doc:4324