Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390