CVE-2015-5910 — Sensitive Information Exposure in Apple Xcode

CWE-200 — Sensitive Information Exposure4 documents4 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 65.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Xcode
Timeline
PublishedSep 18
Latest updateMay 17

Description

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS vector

AV:A/AC:L/C:P/I:N/A:NExploitability: 6.5 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/xcode6.4

Patches

Patch: lists.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x3m7-6q3v-h9p5: IDE Xcode Server in Apple Xcode before 7↗2022-05-17
▶
CVEList
CVE-2015-5910: IDE Xcode Server in Apple Xcode before 7↗2015-09-18
▶

📋Vendor Advisories

1
Apple
CVE-2015-5910: Xcode 7.0↗
▶
CVE-2015-5910 — Sensitive Information Exposure in Apple | cvebase