PT-2020-7435
CVE-2013-3321
·
تاريخ النشر
2020-01-29
·
تاريخ التحديث
2020-01-31
الوصف من
CVSS 2.0
6.0
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
NetApp OnCommand System Manager versions 2.1 and earlier
Description:
The issue allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the
SnapMirror log path parameter. This can be exploited by sending requests to the diagnostic page.Recommendations:
For NetApp OnCommand System Manager versions 2.1 and earlier, consider restricting access to the diagnostic page until a fix is available. As a temporary workaround, avoid using the
SnapMirror log path parameter in requests to the diagnostic page. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾