[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

HTTP request smuggling vulnerability in IDE Xcode Server in Apple Xcode - CVE-2019-20372

ID: oval:org.secpod.oval:def:75135Date: (C)2021-09-23   (M)2023-12-20
Class: VULNERABILITYFamily: macos




The host is installed with Xcode before 13 on Apple Mac OS 11.3 or later and is prone to an HTTP request smuggling vulnerability. A flaw is present in the application, which fails to properly handle issue in nginx. Successful exploitation allows an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

Platform:
Apple Mac OS 11
Product:
Apple XCode
Reference:
CVE-2019-20372
CVE    1
CVE-2019-20372
CPE    2
cpe:/a:apple:xcode
cpe:/o:apple:mac_os_11

© SecPod Technologies