CVE-2013-3321

Name of the Vulnerable Software and Affected Versions: NetApp OnCommand System Manager versions 2.1 and earlier

Description: The issue allows remote attackers to include arbitrary files through specially crafted requests to the "diagnostic" page using the SnapMirror log path parameter. This can be exploited by sending requests to the diagnostic page.

Recommendations: For NetApp OnCommand System Manager versions 2.1 and earlier, consider restricting access to the diagnostic page until a fix is available. As a temporary workaround, avoid using the SnapMirror log path parameter in requests to the diagnostic page. At the moment, there is no information about a newer version that contains a fix for this vulnerability.