CVE-2018-14833

Intuit Lacerte 2017 has Incorrect Access Control...

EUVD-2018-3375

Malware in sbrugna...

EUVD-2018-6717

Malware in sbrugna...

CVE-2018-14833

Intuit Lacerte 2017 has Incorrect Access Control...

CVE-2018-14833

Intuit Lacerte 2017 has Incorrect Access Control...

Improper access control

Intuit Lacerte 2017 has Incorrect Access Control...

CVE-2018-14833

CVE-2018-14833 concerns Intuit Lacerte 2017 with an improper access control vulnerability. The connected records describe a client/server scenario where the server transmits the entire customer list in cleartext over SMB after authentication, enabling an attacker on the network to sniff sensitive...

CVE-2018-14833

Intuit Lacerte 2017 has Incorrect Access Control...

Intuit Lacerte 2017 for Windows Information Disclosure Vulnerability

Intuit Lacerte 2017 for Windows is a tax filing software package from Intuit, USA. The software features automatic calculations, automatic diagnostics, and more. A security vulnerability exists in Intuit Lacerte 2017 for Windows, which originates in a client/server environment where the program...

Design/Logic Flaw

Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to 1 obtain sensitive information by sniffing the network or 2 conduct man-in-the-middle MITM attacks via unspecified vectors. The customer list contains...

CVE-2018-11338

Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to 1 obtain sensitive information by sniffing the network or 2 conduct man-in-the-middle MITM attacks via unspecified vectors. The customer list contains...

CVE-2018-11338

Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to 1 obtain sensitive information by sniffing the network or 2 conduct man-in-the-middle MITM attacks via unspecified vectors. The customer list contains...

CVE-2018-11338

CVE-2018-11338 affects Intuit Lacerte 2017 for Windows in a client/server setup where the server sends the entire customer list in cleartext over SMB after client authentication. The exposed data includes full names, SSNs, addresses, job titles, phone numbers, emails, spouse contact details, and ...

PT-2018-10495 · Intuit · Intuit Lacerte

Name of the Vulnerable Software and Affected Versions: Intuit Lacerte version 2017 Intuit Lacerte versions prior to 2017 Description: The software transfers the entire customer list in cleartext over SMB, allowing attackers to obtain sensitive information by sniffing the network or conduct...