Because of a bug in REST processing value given is treated as a memory address. It makes it possible to read any memory block.
vulners.com/securityvulns/securityvulns:doc:4656