CVE-2015-5910

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

IDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted, which allows remote attackers to obtain sensitive information by sniffing the network.

Metrics

CVSS 2.0 3.3/10AV:A/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id/1033596
https://support.apple.com/HT205217Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.htmlPatch, Vendor Advisory
http://www.securitytracker.com/id/1033596
https://support.apple.com/HT205217Vendor Advisory

Timeline

Published: Sep 18, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-591110.0Multiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3 allow attackers to have an unknown impact v CVE-2015-59125.0The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hos CVE-2015-59136.8Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that r CVE-2015-59144.7The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inser CVE-2015-59155.0Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vecto CVE-2015-59164.3The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by CVE-2015-59175.0The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of ser CVE-2015-59187.2GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified ve CVE-2015-59197.2GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified ve CVE-2015-59204.3The Software Update component in Apple iTunes before 12.3 does not properly handle redirection, which allows man-in-the-middle attackers to CVE-2015-59214.3WebKit in Apple iOS before 9 mishandles "Content-Disposition: attachment" HTTP headers, which might allow man-in-the-middle attackers to obt CVE-2015-592210.0Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before