static bool credtype_match(git_http_auth_scheme *scheme, void *data)
{
	unsigned int credtype = *(unsigned int *)data;

	return !!(scheme->credtypes & credtype);
}

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.