The software, by default, initializes an internal variable with an insecure or less secure value than is possible.