CVE-2016-8912

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be read by an authenticated user.

• CWE-532

• http://www.ibm.com/support/docview.wss?uid=swg21993982Vendor Advisory
• http://www.securityfocus.com/bid/94324Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/118390Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg21993982Vendor Advisory
• http://www.securityfocus.com/bid/94324Third Party Advisory, VDB Entry

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8906SQL injection vulnerability in the "Site Browser > Links pag…
• CVE-2016-8907SQL injection vulnerability in the "Content Types > Content …
• CVE-2016-8908SQL injection vulnerability in the "Site Browser > HTML page…
• CVE-2016-8909The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU …6
• CVE-2016-8910The rtl8139_cplus_transmit function in hw/net/rtl8139.c in Q…6
• CVE-2016-8911IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a…
• CVE-2016-8913IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a…
• CVE-2016-8915IBM WebSphere MQ 8.0 could allow an authenticated user with …
• CVE-2016-8916IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores pass…
• CVE-2016-8917IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cro…
• CVE-2016-8918IBM Integration Bus, under non default configurations, could…
• CVE-2016-8919IBM WebSphere Application Server may be vulnerable to a deni…