Skin Management Components Vulnerable to Path Traversal Attacks

CVE-2024-38652

Summary

A path traversal vulnerability exists within the skin management component of Ivanti Avalanche 6.3.1, which permits remote unauthenticated attackers to manipulate file paths. By exploiting this flaw, attackers can delete arbitrary files, potentially resulting in a denial of service condition. This vulnerability emphasizes the importance of implementing stringent input validation measures to mitigate unauthorized access and file management operations.

References