The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere.