Security Advisory
CVE-2014-0031
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request.