Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an attacker to access information which would otherwise be restricted.
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
https://launchpad.support.sap.com/#/notes/2723878