A draft report seen by the BBC confirms the Post Office knew of IT vulnerabilities before Bates v Post Office case.