IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users.
[
{
"product": "Kenexa LMS on Cloud",
"vendor": "IBM Corporation",
"versions": [
{
"status": "affected",
"version": "13.0"
},
{
"status": "affected",
"version": "13.1"
},
{
"status": "affected",
"version": "13.2"
},
{
"status": "affected",
"version": "13.2.2"
},
{
"status": "affected",
"version": "13.2.3"
},
{
"status": "affected",
"version": "13.2.4"
},
{
"status": "affected",
"version": "14.0.0"
},
{
"status": "affected",
"version": "14.1.0"
},
{
"status": "affected",
"version": "14.2.0"
}
]
}
]