Under certain conditions Solution Manager, version 7.2, allows an malicious user to access information which would otherwise be restricted.
sap solution manager 7.2