Under certain conditions SAP Business Process Automation (BPA) By Redwood, 9.00, 9.10, allows an attacker to access information which would otherwise be restricted.
https://launchpad.support.sap.com/#/notes/2596535
https://blogs.sap.com/2018/03/13/sap-security-patch-day-march-2018/