Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted.
CWE-200, NVD-CWE-noinfo