Description
IDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail lists, which allows remote attackers to obtain potentially sensitive build information in opportunistic circumstances by leveraging incorrect notification delivery.
References
- 1033596 vdb-entry
- https://support.apple.com/HT205217
- APPLE-SA-2015-09-16-2 vendor-advisory