Unscored CVE-2014-4499 EUVD-2014-4426GHSA-3236-525j-98r4

The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows loc…

Published Jan 30, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows local users to obtain sensitive information by reading a file.

References

1031650 vdb-entry
http://support.apple.com/HT204244
APPLE-SA-2015-01-27-4 vendor-advisory