Detections
Analytics

CVE-2015-5910

high

Description

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network.

References

https://support.apple.com/HT205217

http://www.securitytracker.com/id/1033596

http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html

Details

Source: Mitre, NVD

Published: 2015-09-18

Updated: 2016-12-22

Risk Information

CVSS v2

Base Score: 3.3

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:N/A:N

Severity: Low

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High