    var findFile = function(baseName) {
        for (var i = 0; i < files.length; i++) {
            if (files[i].baseName === baseName) {
                return files[i];
            }
        }
        return undefined;
    };
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.