function BadAuthDigestTestController($serverPort) {
  $args = array('Authorization' => 'Digest "username="admin", ' .
    'realm="Restricted area", nonce="564a12f5c065e", ' .
    'uri="/test_auth_digest.php", cnonce="MjIyMTg2", nc=00000001, ' .
    'qop="auth", response="6dfbea52fbf13016476c1879e6436004", ' .
    'opaque="cdce8a5c95a1427d74df7acbf41c9ce0"');
  var_dump(request('localhost', $serverPort, "test_auth_digest.php",
                  [], [], $args));
}
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.