CVEvulnerability
CVE-2013-3321
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-01-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-829
Description
NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter.
Affected configurations
• netapp oncommand system manager (<= 2.1)
Related
Weakness · CWE (1)
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84062 Third Party Advisory, VDB Entry
- https://www.securityfocus.com/archive/1/526552 Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84062 Third Party Advisory, VDB Entry
- https://www.securityfocus.com/archive/1/526552 Exploit, Third Party Advisory, VDB Entry