CVE-2013-3321

  • Last update: Apr 13, 2023

Description

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter.

Software From Fixed in
netapp / oncommand_system_manager - 2.1.x

Details

    • Severity: High
  • CVE: CVE-2013-3321
  • Published: Jan 29, 2020
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: High
  • Score: 7.5
  • AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2

  • Severity: Medium
  • Score: 6
  • AV:N/AC:M/Au:S/C:P/I:P/A:P

CWEs