CVE-2014-4499

CVE-2014-4499 affects the CommerceKit Framework on OS X Yosemite prior to 10.10.2. The App Store process could log Apple ID credentials in App Store logs, enabling local users to read sensitive information from a file. Mitigation per the sources is to apply the OS X 10.10.2 security update (Apple...