            $v = $this->_trimString($v);
            if ($v !== '') {
                $_POST[$key][] = $v;
            }
        }
    }
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.