Security Advisory
CVE-2014-6257
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method, aka ZEN-15407.