CVE-2016-8913

CVE-2016-8913 affects IBM Kenexa LMS on Cloud. The vulnerability is a directory-traversal flaw where a remote attacker can craft URL requests containing dot-dot sequences (/../) to view arbitrary files. Affected versions include LMS on Cloud 4.1, 4.2, 4.2.2, 4.2.3, and 4.2.4; the issue is due to ...