Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would otherwise be restricted.
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=495289255
https://launchpad.support.sap.com/#/notes/2588475