    public function emptyPasswordData()
    {
        return array(
            array(null),
            array(''),
        );
    }
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.