Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server), versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted.
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=520259032