PT-2015-7069 · Apple · Xcode

Publicado 2015-09-18 · Atualizado 2016-12-22 · CVE-2015-5910

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 7.0

Description The issue concerns the IDE Xcode Server in Apple Xcode, where server traffic is not properly encrypted. This allows remote attackers to obtain sensitive information by sniffing the network.

Recommendations For versions prior to 7.0, update to version 7.0 or later to ensure that server traffic is encrypted.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-5910

Produtos afetados

Xcode

Referências · 4

• http://securitytracker.com/id/1033596 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5910 · Nota de Segurança
• https://support.apple.com/HT205217 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html · Aviso do Fabricante