Under certain conditions SAP BusinessObjects Business Intelligence platform (Central Management Server) versions 4.2 and 4.3 allows an attacker to access information which would otherwise be restricted.