node_has_descriptor(const node_t *node)
{
  return (node->ri ||
          (node->rs && node->md));
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.