system: You are an expert security code reviewer. You will be shown a source code file along with a multiple-choice question listing several function or class names from that file. Your task is to identify which one contains the specified CWE vulnerability.

OUTPUT FORMAT: Respond with the single letter of the correct option, wrapped in \boxed{...}. Example: `\boxed{B}`. Output the boxed letter ONLY -- no explanation, no other text.

user: ```python
import os
import yaml
from sqlalchemy import create_engine
import yaml
import json
import logging

#logging.basicConfig(format = "%(asctime)s %(message)s",
#               filename ="setup_env.log", level = logging.DEBUG)

def get_database(config_file_name='pipeline/default_profile.yaml'):
    try:
        logging.debug('going to try to load connection')
        engine, dbconf = get_connection_from_profile(config_file_name)
    except IOError:
        #add log statement
        print('Setup-Environment: IOError')
        return None, 'fail'

    config = get_config_file(config_file_name)

    if config == None:
        return None, 'failed to load config file'

    return engine,config

def get_config_file(config_file_name = 'pipeline/default_profile.yaml'):
    try:
        with open(config_file_name, 'r') as f:
            config = yaml.load(f)
            #add log statement
            return config
    except:
        # add log statement
        print('failed to load experiment config file')
        return None

def get_connection_from_profile(config_file_name = "pipeline/default_profile.yaml"):
    logging.debug("going to try to get values")
    with open(config_file_name, 'r') as f:
        vals = yaml.load(f)

    logging.debug("got to values")
    logging.debug(vals)

    if not ('db_connection_config_path' in vals.keys()):
        raise Exception('Bad config file: '+ config_file_name + ' does not contain db config path')

    with open(vals['db_connection_config_path']) as f:
        db_config = json.load(f)
        engine = create_engine('postgres://', connect_args=db_config)
    

    if 'DBSETUP' not in vals.keys():
        raise Exception('Point to PD database config file')


    return engine, vals['DBSETUP']

    

    if 'DBSETUP' not in vals.keys():
        raise Exception('Point to PD database config file')


    return engine, vals['DBSETUP']


def get_engine(db, user, host, port, passwd):
    url = 'postgresql://{user}:{passwd}@{host}:{port}/{db}'.format(
                    user=user, passwd=passwd, host=host, port=port, db=db)

    logging.debug(url)

    engine = create_engine(url)
    return engine

def close_engine(engine):
    engine.dispose()

def get_uri_string(config_file_name = "pipeline/default_profile.yaml"):
    vals = get_config_file(config_file_name)


    if not ('PGHOST' in vals.keys() and
                    'PGUSER' in vals.keys() and
                    'PGPASSWORD' in vals.keys() and
                    'PGDATABASE' in vals.keys() and
                    'PGPORT' in vals.keys()):
        raise Exception('Bad config file: '+ config_file_name)

    uri = ("postgresql://{}:{}@{}:{}/{}").format(vals['PGUSER'], vals['PGPASSWORD'], vals['PGHOST'],vals['PGPORT'], vals['PGDATABASE'])
    return uri

```

Which of the following functions or classes contains a `CWE-312: Cleartext Storage of Sensitive Information` vulnerability?

  A) get_database
  B) get_config_file
  C) get_engine
  D) get_connection_from_profile
Answer: C