CVE-2013-3321

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-01-29

Last modified

2024-08-06

Weaknesses

CWE-829

Affected products

• Oncommand System Manager (Netapp)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/84062
• https://www.securityfocus.com/archive/1/526552