CVE-2015-7056

Low

Low Medium High Critical

CVSS Score

Published: Dec 11, 2015

Last Modified: Apr 12, 2025

Vulnerability Description

IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern.

Known Affected Software

55 configuration(s) from 1 vendor(s)

xcode

Version:

6.1.1

CPE:

cpe:2.3:a:apple:xcode:6.1.1:*:*:*:*:*:*:*

xcode

Version:

7.1

CPE:

cpe:2.3:a:apple:xcode:7.1:*:*:*:*:*:*:*

xcode

Version:

4.0

CPE:

cpe:2.3:a:apple:xcode:4.0:*:*:*:*:*:*:*

xcode

Version:

4.0.1

CPE:

cpe:2.3:a:apple:xcode:4.0.1:*:*:*:*:*:*:*

xcode

Version:

3.1.1

CPE:

cpe:2.3:a:apple:xcode:3.1.1:*:*:*:*:*:*:*

xcode

Version:

1.5.0

CPE:

cpe:2.3:a:apple:xcode:1.5.0:*:*:*:*:*:*:*

xcode

Version:

4.6

CPE:

cpe:2.3:a:apple:xcode:4.6:*:*:*:*:*:*:*

xcode

Version:

4.2

CPE:

cpe:2.3:a:apple:xcode:4.2:*:*:*:*:*:*:*

xcode

Version:

4.3.3

CPE:

cpe:2.3:a:apple:xcode:4.3.3:*:*:*:*:*:*:*

xcode

Version:

7.1.1

CPE:

cpe:2.3:a:apple:xcode:7.1.1:*:*:*:*:*:*:*

xcode

Version:

5.1

CPE:

cpe:2.3:a:apple:xcode:5.1:*:*:*:*:*:*:*

xcode

Version:

4.6.3

CPE:

cpe:2.3:a:apple:xcode:4.6.3:*:*:*:*:*:*:*

xcode

Version:

2.3.0

CPE:

cpe:2.3:a:apple:xcode:2.3.0:*:*:*:*:*:*:*

xcode

Version:

6.1

CPE:

cpe:2.3:a:apple:xcode:6.1:*:*:*:*:*:*:*

xcode

Version:

4.3.2

CPE:

cpe:2.3:a:apple:xcode:4.3.2:*:*:*:*:*:*:*

xcode

Version:

6.3.1

CPE:

cpe:2.3:a:apple:xcode:6.3.1:*:*:*:*:*:*:*

xcode

Version:

2.0.0

CPE:

cpe:2.3:a:apple:xcode:2.0.0:*:*:*:*:*:*:*

xcode

Version:

2.4.0

CPE:

cpe:2.3:a:apple:xcode:2.4.0:*:*:*:*:*:*:*

xcode

Version:

6.3

CPE:

cpe:2.3:a:apple:xcode:6.3:*:*:*:*:*:*:*

xcode

Version:

3.2.2

CPE:

cpe:2.3:a:apple:xcode:3.2.2:*:*:*:*:*:*:*

xcode

Version:

2.1.0

CPE:

cpe:2.3:a:apple:xcode:2.1.0:*:*:*:*:*:*:*

xcode

Version:

3.2.1

CPE:

cpe:2.3:a:apple:xcode:3.2.1:*:*:*:*:*:*:*

xcode

Version:

3.2.4

CPE:

cpe:2.3:a:apple:xcode:3.2.4:*:*:*:*:*:*:*

xcode

Version:

4.3.1

CPE:

cpe:2.3:a:apple:xcode:4.3.1:*:*:*:*:*:*:*

xcode

Version:

7.0

CPE:

cpe:2.3:a:apple:xcode:7.0:*:*:*:*:*:*:*

xcode

Version:

3.2.3

CPE:

cpe:2.3:a:apple:xcode:3.2.3:*:*:*:*:*:*:*

xcode

Version:

5.0.1

CPE:

cpe:2.3:a:apple:xcode:5.0.1:*:*:*:*:*:*:*

xcode

Version:

5.0.2

CPE:

cpe:2.3:a:apple:xcode:5.0.2:*:*:*:*:*:*:*

xcode

Version:

3.1.3

CPE:

cpe:2.3:a:apple:xcode:3.1.3:*:*:*:*:*:*:*

xcode

Version:

7.0.1

CPE:

cpe:2.3:a:apple:xcode:7.0.1:*:*:*:*:*:*:*

xcode

Version:

6.0

CPE:

cpe:2.3:a:apple:xcode:6.0:*:*:*:*:*:*:*

xcode

Version:

5.1.1

CPE:

cpe:2.3:a:apple:xcode:5.1.1:*:*:*:*:*:*:*

xcode

Version:

4.6.2

CPE:

cpe:2.3:a:apple:xcode:4.6.2:*:*:*:*:*:*:*

xcode

Version:

4.6.1

CPE:

cpe:2.3:a:apple:xcode:4.6.1:*:*:*:*:*:*:*

xcode

Version:

6.3.2

CPE:

cpe:2.3:a:apple:xcode:6.3.2:*:*:*:*:*:*:*

xcode

Version:

3.1.2

CPE:

cpe:2.3:a:apple:xcode:3.1.2:*:*:*:*:*:*:*

xcode

Version:

4.2.1

CPE:

cpe:2.3:a:apple:xcode:4.2.1:*:*:*:*:*:*:*

xcode

Version:

4.4.1

CPE:

cpe:2.3:a:apple:xcode:4.4.1:*:*:*:*:*:*:*

xcode

Version:

4.3

CPE:

cpe:2.3:a:apple:xcode:4.3:*:*:*:*:*:*:*

xcode

Version:

4.5.2

CPE:

cpe:2.3:a:apple:xcode:4.5.2:*:*:*:*:*:*:*

xcode

Version:

4.5

CPE:

cpe:2.3:a:apple:xcode:4.5:*:*:*:*:*:*:*

xcode

Version:

3.1

CPE:

cpe:2.3:a:apple:xcode:3.1:*:*:*:*:*:*:*

xcode

Version:

4.1.1

CPE:

cpe:2.3:a:apple:xcode:4.1.1:*:*:*:*:*:*:*

xcode

Version:

6.2

CPE:

cpe:2.3:a:apple:xcode:6.2:beta_2:*:*:*:*:*:*

xcode

Version:

2.2.0

CPE:

cpe:2.3:a:apple:xcode:2.2.0:*:*:*:*:*:*:*

xcode

Version:

4.5.1

CPE:

cpe:2.3:a:apple:xcode:4.5.1:*:*:*:*:*:*:*

xcode

Version:

4.4

CPE:

cpe:2.3:a:apple:xcode:4.4:*:*:*:*:*:*:*

xcode

Version:

2.4.1

CPE:

cpe:2.3:a:apple:xcode:2.4.1:*:*:*:*:*:*:*

xcode

Version:

3.2.5

CPE:

cpe:2.3:a:apple:xcode:3.2.5:*:*:*:*:*:*:*

xcode

Version:

4.1

CPE:

cpe:2.3:a:apple:xcode:4.1:*:*:*:*:*:*:*

xcode

Version:

5.0

CPE:

cpe:2.3:a:apple:xcode:5.0:*:*:*:*:*:*:*

xcode

Version:

6.4

CPE:

cpe:2.3:a:apple:xcode:6.4:*:*:*:*:*:*:*

xcode

Version:

6.0.1

CPE:

cpe:2.3:a:apple:xcode:6.0.1:*:*:*:*:*:*:*

xcode

Version:

4.0.2

CPE:

cpe:2.3:a:apple:xcode:4.0.2:*:*:*:*:*:*:*

xcode

Version:

3.1.4

CPE:

cpe:2.3:a:apple:xcode:3.1.4:*:*:*:*:*:*:*

This vulnerability affects 55 software configuration(s). Ensure you patch all affected systems.

References & Resources

Severity Details

out of 10.0

Low

Weakness Type (CWE)

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Description: The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploit Likelihood: High
Typical Severity: Medium
Abstraction Level: Class