Switchzilla says attackers could access sensitive data and make configuration changes across tenant boundaries through vulnerable internal APIs