CVE Daily

CVE-2015-7056

IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which all...

Medium CVSS 5.0

Overview

IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern.

CWE: CWE-200 Published: 2015-12-11T11:59:22.070
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags