CVE-2015-5916

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9

Description The issue is related to the Apple Pay component in iOS, which lacks protection for certain data. This allows a remote attacker to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature. The vulnerability can be exploited to access protected payment information by viewing log files.

Recommendations For versions prior to 9, update to iOS version 9 or later to resolve the issue. As a temporary workaround, consider restricting access to the transaction-log feature to minimize the risk of exploitation.