CVE-2015-5909

IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery.

• CWE-200

• http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.htmlPatch, Vendor Advisory
• http://www.securitytracker.com/id/1033596
• https://support.apple.com/HT205217Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.htmlPatch, Vendor Advisory
• http://www.securitytracker.com/id/1033596
• https://support.apple.com/HT205217Vendor Advisory

Published

Sep 18, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5903The kernel in Apple iOS before 9 allows local users to gain …
• CVE-2015-5904Safari in Apple iOS before 9 allows remote attackers to spoo…
• CVE-2015-5905Safari in Apple iOS before 9 allows remote attackers to spoo…
• CVE-2015-5906The HTML form implementation in WebKit in Apple iOS before 9…
• CVE-2015-5907WebKit in Apple iOS before 9 allows man-in-the-middle attack…
• CVE-2015-5908Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-5910IDE Xcode Server in Apple Xcode before 7.0 does not ensure t…
• CVE-2015-5911Multiple unspecified vulnerabilities in Twisted in Wiki Serv…
• CVE-2015-5912The CFNetwork FTPProtocol component in Apple iOS before 9 al…
• CVE-2015-5913Heimdal, as used in Apple OS X before 10.11, allows remote a…
• CVE-2015-5914The EFI component in Apple OS X before 10.11 allows physical…
• CVE-2015-5915Apple OS X before 10.11 does not ensure that the keychain's …