...
Although IFS does not affect the command portion of this string, /bin/ls, it does determine how the argument is built after calling date. If the default shell does not ignore the incoming value of the IFS}} environment value, and an attacker sets {{IFS to ".", the intended directory will not be found.
...