The application stores sensitive information in plaintext within a resource that might be accessible to another control sphere, when the information should be encrypted or otherwise protected.