skip_space(char **cpp)
{
	char *cp;

	for (cp = *cpp; *cp == ' ' || *cp == '\t'; cp++)
		;
	*cpp = cp;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.