CVE-2016-6124

CVE-2016-6124 affects IBM Kenexa LMS on Cloud (versions 13.1–13.2; 13.2.4) where an unauthenticated? or remote attacker could upload arbitrary files, enabling arbitrary code execution on the vulnerable server. The IBM bulletin for LMS 5.0 on Cloud confirms remediation by updating to the latest fi...