CVE-2018-3854 - An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2

Back Back to CVE browser

HIGH

An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2

Published Dec 3, 2018

7.1

HIGH

CVSS 3.1

EPSS 0.43%

Description

An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data without knowing the password. An attacker needs to have access to the password-protected files to trigger this vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-15640
Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0537
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-15640		Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0537		x_refsource_MISCExploitThird Party Advisory