CVE-2016-5941

IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences /../ to view arbitrary files on the system...

CVE-2016-5941

CVE-2016-5941 concerns IBM Kenexa LMS on Cloud, where a remote attacker could traverse directories by abusing dot-dot sequences in URL requests (e.g., /../) to view arbitrary system files. The IBM Security Bulletin documents this vulnerability under multiple CVEs for LMS on Cloud and confirms tha...