Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of service via arbitrary file deletion.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')