It's possible to obtain environment variables values.
vulners.com/securityvulns/securityvulns:doc:27673