CVE-2014-4499

The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows local users to obtain sensitive information by reading a file...

CVE-2014-4499

CVE-2014-4499 affects the CommerceKit Framework on OS X Yosemite prior to 10.10.2. The App Store process could log Apple ID credentials in App Store logs, enabling local users to read sensitive information from a file. Mitigation per the sources is to apply the OS X 10.10.2 security update (Apple...