Phone-number disclosure via insufficient log redaction

Information disclosure in the Time Zone component of Apple operating systems allows local users to read a phone number from system logs. The component writes a user's phone number to system logs without sufficient redaction; Apple has not disclosed the responsible function or log entry. A locally running app and user interaction are required, and the reported consequence is limited to disclosure of the phone number.