invalidCommandBlock (RequestInfo *pRI) {
    RLOGE("invalid command block for token %d request %s",
                pRI->token, requestToString(pRI->pCI->requestNumber));
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.