CVE-2016-8933

IBM Kenexa LMS on Cloud contains a directory-traversal vulnerability (CVE-2016-8933). An attacker can send specially crafted URLs with dot-dot sequences (../) to view arbitrary system files. Affected product: IBM Kenexa LMS on Cloud. Root cause: insufficient validation of URL paths in the web int...