CVE-2015-5909

Low

Low Medium High Critical

CVSS Score

Published: Sep 18, 2015

Last Modified: Apr 12, 2025

Vulnerability Description

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery.

Known Affected Software

51 configuration(s) from 1 vendor(s)

xcode

Version:

6.1.1

CPE:

cpe:2.3:a:apple:xcode:6.1.1:*:*:*:*:*:*:*

xcode

Version:

4.0

CPE:

cpe:2.3:a:apple:xcode:4.0:*:*:*:*:*:*:*

xcode

Version:

4.0.1

CPE:

cpe:2.3:a:apple:xcode:4.0.1:*:*:*:*:*:*:*

xcode

Version:

3.1.1

CPE:

cpe:2.3:a:apple:xcode:3.1.1:*:*:*:*:*:*:*

xcode

Version:

1.5.0

CPE:

cpe:2.3:a:apple:xcode:1.5.0:*:*:*:*:*:*:*

xcode

Version:

4.6

CPE:

cpe:2.3:a:apple:xcode:4.6:*:*:*:*:*:*:*

xcode

Version:

4.2

CPE:

cpe:2.3:a:apple:xcode:4.2:*:*:*:*:*:*:*

xcode

Version:

4.3.3

CPE:

cpe:2.3:a:apple:xcode:4.3.3:*:*:*:*:*:*:*

xcode

Version:

5.1

CPE:

cpe:2.3:a:apple:xcode:5.1:*:*:*:*:*:*:*

xcode

Version:

4.6.3

CPE:

cpe:2.3:a:apple:xcode:4.6.3:*:*:*:*:*:*:*

xcode

Version:

2.3.0

CPE:

cpe:2.3:a:apple:xcode:2.3.0:*:*:*:*:*:*:*

xcode

Version:

6.1

CPE:

cpe:2.3:a:apple:xcode:6.1:*:*:*:*:*:*:*

xcode

Version:

4.3.2

CPE:

cpe:2.3:a:apple:xcode:4.3.2:*:*:*:*:*:*:*

xcode

Version:

6.3.1

CPE:

cpe:2.3:a:apple:xcode:6.3.1:*:*:*:*:*:*:*

xcode

Version:

2.0.0

CPE:

cpe:2.3:a:apple:xcode:2.0.0:*:*:*:*:*:*:*

xcode

Version:

2.4.0

CPE:

cpe:2.3:a:apple:xcode:2.4.0:*:*:*:*:*:*:*

xcode

Version:

6.3

CPE:

cpe:2.3:a:apple:xcode:6.3:*:*:*:*:*:*:*

xcode

Version:

3.2.2

CPE:

cpe:2.3:a:apple:xcode:3.2.2:*:*:*:*:*:*:*

xcode

Version:

2.1.0

CPE:

cpe:2.3:a:apple:xcode:2.1.0:*:*:*:*:*:*:*

xcode

Version:

3.2.1

CPE:

cpe:2.3:a:apple:xcode:3.2.1:*:*:*:*:*:*:*

xcode

Version:

3.2.4

CPE:

cpe:2.3:a:apple:xcode:3.2.4:*:*:*:*:*:*:*

xcode

Version:

4.3.1

CPE:

cpe:2.3:a:apple:xcode:4.3.1:*:*:*:*:*:*:*

xcode

Version:

3.2.3

CPE:

cpe:2.3:a:apple:xcode:3.2.3:*:*:*:*:*:*:*

xcode

Version:

5.0.1

CPE:

cpe:2.3:a:apple:xcode:5.0.1:*:*:*:*:*:*:*

xcode

Version:

5.0.2

CPE:

cpe:2.3:a:apple:xcode:5.0.2:*:*:*:*:*:*:*

xcode

Version:

3.1.3

CPE:

cpe:2.3:a:apple:xcode:3.1.3:*:*:*:*:*:*:*

xcode

Version:

6.0

CPE:

cpe:2.3:a:apple:xcode:6.0:*:*:*:*:*:*:*

xcode

Version:

5.1.1

CPE:

cpe:2.3:a:apple:xcode:5.1.1:*:*:*:*:*:*:*

xcode

Version:

4.6.2

CPE:

cpe:2.3:a:apple:xcode:4.6.2:*:*:*:*:*:*:*

xcode

Version:

4.6.1

CPE:

cpe:2.3:a:apple:xcode:4.6.1:*:*:*:*:*:*:*

xcode

Version:

6.3.2

CPE:

cpe:2.3:a:apple:xcode:6.3.2:*:*:*:*:*:*:*

xcode

Version:

3.1.2

CPE:

cpe:2.3:a:apple:xcode:3.1.2:*:*:*:*:*:*:*

xcode

Version:

4.2.1

CPE:

cpe:2.3:a:apple:xcode:4.2.1:*:*:*:*:*:*:*

xcode

Version:

4.4.1

CPE:

cpe:2.3:a:apple:xcode:4.4.1:*:*:*:*:*:*:*

xcode

Version:

4.3

CPE:

cpe:2.3:a:apple:xcode:4.3:*:*:*:*:*:*:*

xcode

Version:

4.5.2

CPE:

cpe:2.3:a:apple:xcode:4.5.2:*:*:*:*:*:*:*

xcode

Version:

4.5

CPE:

cpe:2.3:a:apple:xcode:4.5:*:*:*:*:*:*:*

xcode

Version:

3.1

CPE:

cpe:2.3:a:apple:xcode:3.1:*:*:*:*:*:*:*

xcode

Version:

4.1.1

CPE:

cpe:2.3:a:apple:xcode:4.1.1:*:*:*:*:*:*:*

xcode

Version:

6.2

CPE:

cpe:2.3:a:apple:xcode:6.2:beta_2:*:*:*:*:*:*

xcode

Version:

2.2.0

CPE:

cpe:2.3:a:apple:xcode:2.2.0:*:*:*:*:*:*:*

xcode

Version:

4.5.1

CPE:

cpe:2.3:a:apple:xcode:4.5.1:*:*:*:*:*:*:*

xcode

Version:

4.4

CPE:

cpe:2.3:a:apple:xcode:4.4:*:*:*:*:*:*:*

xcode

Version:

2.4.1

CPE:

cpe:2.3:a:apple:xcode:2.4.1:*:*:*:*:*:*:*

xcode

Version:

3.2.5

CPE:

cpe:2.3:a:apple:xcode:3.2.5:*:*:*:*:*:*:*

xcode

Version:

4.1

CPE:

cpe:2.3:a:apple:xcode:4.1:*:*:*:*:*:*:*

xcode

Version:

5.0

CPE:

cpe:2.3:a:apple:xcode:5.0:*:*:*:*:*:*:*

xcode

Version:

6.4

CPE:

cpe:2.3:a:apple:xcode:6.4:*:*:*:*:*:*:*

xcode

Version:

6.0.1

CPE:

cpe:2.3:a:apple:xcode:6.0.1:*:*:*:*:*:*:*

xcode

Version:

4.0.2

CPE:

cpe:2.3:a:apple:xcode:4.0.2:*:*:*:*:*:*:*

xcode

Version:

3.1.4

CPE:

cpe:2.3:a:apple:xcode:3.1.4:*:*:*:*:*:*:*

This vulnerability affects 51 software configuration(s). Ensure you patch all affected systems.

References & Resources

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Description: The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploit Likelihood: High
Typical Severity: Medium
Abstraction Level: Class