The Podcasts component in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to discover unique identifiers by reading asset-download request data.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1110
Reference (s):
- APPLE:APPLE-SA-2015-04-08-3
- URL: http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html
- APPLE:APPLE-SA-2015-04-08-4
- URL: http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html
- BID:73983