static int sn_cmp(const ASN1_OBJECT * const *a, const unsigned int *b)
	{ return(strcmp((*a)->sn,nid_objs[*b].sn)); }

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.