← Database

CVE-2024-38652

CRITICAL CVSS: 9.1 Published: 2024-08-14 Modified: 2026-06-17

Description

Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of service via arbitrary file deletion.

Affected Platforms

Ivanti Avalanche

Weakness Type

CWE-22, CWE-22

References