Description
The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors.
References
- APPLE-SA-2015-10-21-8 vendor-advisory
- https://support.apple.com/HT205376
- 1033933 vdb-entry