Information disclosure in Apple Xcode

CVE-2015-5910

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network.

Vulnerability class: Information Disclosure

EPSS: 0.008 (51.3th percentile) — read the EPSS interpretation.

Affected products

Apple Xcode
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

product-security@apple.com (vdb-entry, x_refsource_SECTRACK)
product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@apple.com (vendor-advisory, x_refsource_APPLE, Patch, Vendor Advisory)