CVE-2014-1279

Vulnerability

Apple TV firmware before version 6.1 logs sensitive user information without proper restriction. Affected versions include Apple TV 2nd generation and later running software prior to 6.1. [1]

Exploitation

An attacker needs local access to the Apple TV (physical or network access to the device) to read the log files. The logs contain sensitive user information that was inadvertently recorded. No authentication beyond device access is required. [1]

Impact

Successful exploitation allows the attacker to obtain sensitive user information from the logs, resulting in information disclosure. The attacker gains access to private data that should not have been logged. [1]

Mitigation

Apple addressed the issue in Apple TV 6.1 by logging less information. Users should update to version 6.1 or later. No workaround is mentioned. [1]