How to recreate:
Create a role with view hosts permission and assign it to a user.
Login with that user.
Go to hosts and search for example "facts.bios_release_date"
You can see the date what should not be possible.

But since it is forbidden to call the facts tab in the host detail view, it should also be impossible to do so in the overview view