CVE-2015-5909: Infoleak
IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5909?
CVE-2015-5909 is considered a medium severity vulnerability due to the potential exposure of sensitive build information.
How do I fix CVE-2015-5909?
To fix CVE-2015-5909, update to Apple Xcode version 7.0 or later where the vulnerability has been addressed.
What type of information can be leaked due to CVE-2015-5909?
CVE-2015-5909 may allow remote attackers to gain access to potentially sensitive build information via improperly restricted repository email lists.
Which versions of Xcode are affected by CVE-2015-5909?
CVE-2015-5909 affects Apple Xcode versions prior to 7.0, specifically up to and including version 6.4.
What component of Xcode does CVE-2015-5909 involve?
CVE-2015-5909 involves the IDE Xcode Server component, which manages project repositories and notifications.