ID de Prueba:	1.3.6.1.4.1.25623.1.0.816892
Categoría:	General
Título:	Apple Xcode Information Disclosure Vulnerability (HT211141)
Resumen:	Apple Xcode is prone to an information disclosure vulnerability.
Descripción:	Summary: Apple Xcode is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to an error where crafted git URL that contains a newline may cause credential information to be provided for the wrong host. Vulnerability Impact: Successful exploitation will allow remote attackers to gain access to sensitive information. Affected Software/OS: Apple Xcode prior to version 11.4.1 Solution: Update to Apple Xcode 11.4.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-5260 Debian Security Information: DSA-4657 (Google Search) https://www.debian.org/security/2020/dsa-4657 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/74Q7WVJ6FKLIN62VS2JD2XCNWK5TNKOW/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MOCTR2SEHCPSCOVUQJAGFPGKFMI2VE6V/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7TVS5UG6JD3MYIGSBKMIOS6AF7CR5IPI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XPCEOIFLLEF24L6GLVJVFZX4CREDEHDF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PN3FUOXKX3AXTULYV53ACABER2W2FSOU/ https://security.gentoo.org/glsa/202004-13 http://packetstormsecurity.com/files/157250/Git-Credential-Helper-Protocol-Newline-Injection.html https://github.com/git/git/commit/9a6bbee8006c24b46a85d29e7b38cfa79e9ab21b https://lore.kernel.org/git/xmqqy2qy7xn8.fsf@gitster.c.googlers.com/ https://lists.debian.org/debian-lts-announce/2020/04/msg00010.html http://www.openwall.com/lists/oss-security/2020/04/15/5 http://www.openwall.com/lists/oss-security/2020/04/15/6 http://www.openwall.com/lists/oss-security/2020/04/20/1 SuSE Security Announcement: openSUSE-SU-2020:0524 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00027.html SuSE Security Announcement: openSUSE-SU-2020:0598 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html https://usn.ubuntu.com/4329-1/
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.