Description
IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern.
References
- https://support.apple.com/HT205642
- APPLE-SA-2015-12-08-6 vendor-advisory
- 1034340 vdb-entry