The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via a DELETE request.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.