Under certain conditions SAP Business One Mobile Android App, version 1.2.12, allows an malicious user to access information which would otherwise be restricted.
sap business one 1.2.12