Lucene search
IbmCVELIST:CVE-2016-6126HistoryFeb 01, 2017 - 8:00 p.m.
CVE-2016-6126
2017-02-0120:00:00
ibm
www.cve.org
6
IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing “dot dot” sequences (/…/) to view arbitrary files on the system.
CNA Affected
[
{
"product": "Kenexa LMS on Cloud",
"vendor": "IBM Corporation",
"versions": [
{
"status": "affected",
"version": "13.0"
},
{
"status": "affected",
"version": "13.1"
},
{
"status": "affected",
"version": "13.2"
},
{
"status": "affected",
"version": "13.2.2"
},
{
"status": "affected",
"version": "13.2.3"
},
{
"status": "affected",
"version": "13.2.4"
},
{
"status": "affected",
"version": "14.0.0"
},
{
"status": "affected",
"version": "14.1.0"
},
{
"status": "affected",
"version": "14.2.0"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2017-02-01 20:59:00
nvd
nvd
CVE-2016-6126
2017-02-01 20:59:02
cve
cve
CVE-2016-6126
2017-02-01 20:59:02
ibm
ibm