CVE-2015-5910

Description

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network.

References

http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html

https://support.apple.com/HT205217

http://www.securitytracker.com/id/1033596

Details

Risk Information

CVSS v2