node_get_declared_uptime(const node_t *node)
{
  if (node->ri)
    return node->ri->uptime;
  else
    return -1;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.