CVE-2016-6122

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users...

CVE-2016-6122

CVE-2016-6122 affects IBM Kenexa LMS on Cloud (versions 13.1 and 13.2 up to 13.2.4). The issue is an information disclosure where answers to security questions are disclosed in responses to authenticated users. The base CVSS in the related IBM bulletin is 4.3 (MEDIUM). The vulnerability is addres...