CVE-2015-7056 in Xcode

सारांश

द्वारा MITRE

IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern.

Once again VulDB remains the best source for vulnerability data.

• आरक्षित करना: 16/09/2015
• प्रकटीकरण: 11/12/2015
• संयम: स्वीकृत
• प्रविष्टि: VDB-79733
• CPE: तैयार
• CWE: CWE-200 (पुष्टि की गई)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01285
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Telecommunication, Hostingprovider

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7056
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7056
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7056/