CVE-2015-5916: Infoleak
Published Sep 18, 2015
·Updated
The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature.
Affected Software
2 affected components
Apple WatchOS<=2.0.0
Apple iPhone OS<=8.4.1
Event History
Sep 18, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5916?
CVE-2015-5916 has been classified as a high severity vulnerability due to its potential to expose sensitive transaction data.
2
How do I fix CVE-2015-5916?
To fix CVE-2015-5916, update your Apple iOS to version 9 or later.
3
Which versions of iOS are affected by CVE-2015-5916?
CVE-2015-5916 affects Apple iOS versions prior to 9 and watchOS versions up to 2.0.0.
4
What impact does CVE-2015-5916 have on users?
CVE-2015-5916 allows remote terminals to access sensitive recent-transaction information during payments.
5
Is there a workaround for CVE-2015-5916?
There are no known workarounds for CVE-2015-5916, and the best mitigation is to apply the available updates.