static int connected(struct usb_dev_state *ps)
{
	return (!list_empty(&ps->list) &&
			ps->dev->state != USB_STATE_NOTATTACHED);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.