CVE-2015-5910

Low

Low Medium High Critical

CVSS Score

Published: Sep 18, 2015

Last Modified: Apr 12, 2025

Vulnerability Description

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network.

Known Affected Software

51 configuration(s) from 1 vendor(s)

xcode

Version:

6.1.1

CPE:

cpe:2.3:a:apple:xcode:6.1.1:*:*:*:*:*:*:*

xcode

Version:

4.0

CPE:

cpe:2.3:a:apple:xcode:4.0:*:*:*:*:*:*:*

xcode

Version:

4.0.1

CPE:

cpe:2.3:a:apple:xcode:4.0.1:*:*:*:*:*:*:*

xcode

Version:

3.1.1

CPE:

cpe:2.3:a:apple:xcode:3.1.1:*:*:*:*:*:*:*

xcode

Version:

1.5.0

CPE:

cpe:2.3:a:apple:xcode:1.5.0:*:*:*:*:*:*:*

xcode

Version:

4.6

CPE:

cpe:2.3:a:apple:xcode:4.6:*:*:*:*:*:*:*

xcode

Version:

4.2

CPE:

cpe:2.3:a:apple:xcode:4.2:*:*:*:*:*:*:*

xcode

Version:

4.3.3

CPE:

cpe:2.3:a:apple:xcode:4.3.3:*:*:*:*:*:*:*

xcode

Version:

5.1

CPE:

cpe:2.3:a:apple:xcode:5.1:*:*:*:*:*:*:*

xcode

Version:

4.6.3

CPE:

cpe:2.3:a:apple:xcode:4.6.3:*:*:*:*:*:*:*

xcode

Version:

2.3.0

CPE:

cpe:2.3:a:apple:xcode:2.3.0:*:*:*:*:*:*:*

xcode

Version:

6.1

CPE:

cpe:2.3:a:apple:xcode:6.1:*:*:*:*:*:*:*

xcode

Version:

4.3.2

CPE:

cpe:2.3:a:apple:xcode:4.3.2:*:*:*:*:*:*:*

xcode

Version:

6.3.1

CPE:

cpe:2.3:a:apple:xcode:6.3.1:*:*:*:*:*:*:*

xcode

Version:

2.0.0

CPE:

cpe:2.3:a:apple:xcode:2.0.0:*:*:*:*:*:*:*

xcode

Version:

2.4.0

CPE:

cpe:2.3:a:apple:xcode:2.4.0:*:*:*:*:*:*:*

xcode

Version:

6.3

CPE:

cpe:2.3:a:apple:xcode:6.3:*:*:*:*:*:*:*

xcode

Version:

3.2.2

CPE:

cpe:2.3:a:apple:xcode:3.2.2:*:*:*:*:*:*:*

xcode

Version:

2.1.0

CPE:

cpe:2.3:a:apple:xcode:2.1.0:*:*:*:*:*:*:*

xcode

Version:

3.2.1

CPE:

cpe:2.3:a:apple:xcode:3.2.1:*:*:*:*:*:*:*

xcode

Version:

3.2.4

CPE:

cpe:2.3:a:apple:xcode:3.2.4:*:*:*:*:*:*:*

xcode

Version:

4.3.1

CPE:

cpe:2.3:a:apple:xcode:4.3.1:*:*:*:*:*:*:*

xcode

Version:

3.2.3

CPE:

cpe:2.3:a:apple:xcode:3.2.3:*:*:*:*:*:*:*

xcode

Version:

5.0.1

CPE:

cpe:2.3:a:apple:xcode:5.0.1:*:*:*:*:*:*:*

xcode

Version:

5.0.2

CPE:

cpe:2.3:a:apple:xcode:5.0.2:*:*:*:*:*:*:*

xcode

Version:

3.1.3

CPE:

cpe:2.3:a:apple:xcode:3.1.3:*:*:*:*:*:*:*

xcode

Version:

6.0

CPE:

cpe:2.3:a:apple:xcode:6.0:*:*:*:*:*:*:*

xcode

Version:

5.1.1

CPE:

cpe:2.3:a:apple:xcode:5.1.1:*:*:*:*:*:*:*

xcode

Version:

4.6.2

CPE:

cpe:2.3:a:apple:xcode:4.6.2:*:*:*:*:*:*:*

xcode

Version:

4.6.1

CPE:

cpe:2.3:a:apple:xcode:4.6.1:*:*:*:*:*:*:*

xcode

Version:

6.3.2

CPE:

cpe:2.3:a:apple:xcode:6.3.2:*:*:*:*:*:*:*

xcode

Version:

3.1.2

CPE:

cpe:2.3:a:apple:xcode:3.1.2:*:*:*:*:*:*:*

xcode

Version:

4.2.1

CPE:

cpe:2.3:a:apple:xcode:4.2.1:*:*:*:*:*:*:*

xcode

Version:

4.4.1

CPE:

cpe:2.3:a:apple:xcode:4.4.1:*:*:*:*:*:*:*

xcode

Version:

4.3

CPE:

cpe:2.3:a:apple:xcode:4.3:*:*:*:*:*:*:*

xcode

Version:

4.5.2

CPE:

cpe:2.3:a:apple:xcode:4.5.2:*:*:*:*:*:*:*

xcode

Version:

4.5

CPE:

cpe:2.3:a:apple:xcode:4.5:*:*:*:*:*:*:*

xcode

Version:

3.1

CPE:

cpe:2.3:a:apple:xcode:3.1:*:*:*:*:*:*:*

xcode

Version:

4.1.1

CPE:

cpe:2.3:a:apple:xcode:4.1.1:*:*:*:*:*:*:*

xcode

Version:

6.2

CPE:

cpe:2.3:a:apple:xcode:6.2:beta_2:*:*:*:*:*:*

xcode

Version:

2.2.0

CPE:

cpe:2.3:a:apple:xcode:2.2.0:*:*:*:*:*:*:*

xcode

Version:

4.5.1

CPE:

cpe:2.3:a:apple:xcode:4.5.1:*:*:*:*:*:*:*

xcode

Version:

4.4

CPE:

cpe:2.3:a:apple:xcode:4.4:*:*:*:*:*:*:*

xcode

Version:

2.4.1

CPE:

cpe:2.3:a:apple:xcode:2.4.1:*:*:*:*:*:*:*

xcode

Version:

3.2.5

CPE:

cpe:2.3:a:apple:xcode:3.2.5:*:*:*:*:*:*:*

xcode

Version:

4.1

CPE:

cpe:2.3:a:apple:xcode:4.1:*:*:*:*:*:*:*

xcode

Version:

5.0

CPE:

cpe:2.3:a:apple:xcode:5.0:*:*:*:*:*:*:*

xcode

Version:

6.4

CPE:

cpe:2.3:a:apple:xcode:6.4:*:*:*:*:*:*:*

xcode

Version:

6.0.1

CPE:

cpe:2.3:a:apple:xcode:6.0.1:*:*:*:*:*:*:*

xcode

Version:

4.0.2

CPE:

cpe:2.3:a:apple:xcode:4.0.2:*:*:*:*:*:*:*

xcode

Version:

3.1.4

CPE:

cpe:2.3:a:apple:xcode:3.1.4:*:*:*:*:*:*:*

This vulnerability affects 51 software configuration(s). Ensure you patch all affected systems.

References & Resources

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Description: The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploit Likelihood: High
Typical Severity: Medium
Abstraction Level: Class