vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vtiger_crm | Vtiger | * | 5.0.2 (including) |