CVE-2015-5920
The Software Update component in Apple iTunes before 12.3 does not properly handle redirection, which allows man-in-the-middle attackers to discover encrypted SMB credentials vi…
Published: 2015-09-18 · CVSS: Unscored
The Software Update component in Apple iTunes before 12.3 does not properly handle redirection, which allows man-in-the-middle attackers to discover encrypted SMB credentials via unspecified vectors.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7