crm_ipcs_flush_events_cb(gpointer data)
{
    crm_client_t *c = data;

    c->event_timer = 0;
    crm_ipcs_flush_events(c);
    return FALSE;
}

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.