The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
Do not expose administrative functionnality on the user UI.
Protect the administrative/restricted functionality with a strong authentication mechanism.