CVE-2013-3321

Опубликовано: 29 янв. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 6

EPSS Низкий

Описание

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/84062
Third Party Advisory
VDB Entry
https://www.securityfocus.com/archive/1/526552
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/84062
Third Party Advisory
VDB Entry
https://www.securityfocus.com/archive/1/526552
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:*

Версия до 2.1 (включая)

EPSS

Процентиль: 75%

0.00906

Низкий

7.5 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-829

Связанные уязвимости

GHSA-x57c-9p4g-m5r3

github

почти 4 года назад