Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.
https://exchange.xforce.ibmcloud.com/vulnerabilities/6644