CVE-2016-5937

High

Published: 01/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized operations on behalf of a trusted user, potentially leading to serious security breaches.

Recommendation

It is recommended to implement additional verification mechanisms, such as CSRF tokens, to secure the application against such attacks.

Other vulnerabilities in IBM Kenexa LCMS Premier on Cloud

CVE-2016-5952High
IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

Original NVD description (English source)