nm_setting_vpn_new (void)
{
	return (NMSetting *) g_object_new (NM_TYPE_SETTING_VPN, NULL);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.