get_random()
{
  long int l;
  prng_bytes ((unsigned char *)&l, sizeof(l));
  if (l < 0)
    l = -l;
  return l;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.