CVE-2018-3854: Exposure of Sensitive Information to an Unauthorized Actor

An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data without knowin...

PT-2018-16248 · Quicken · Quicken Deluxe 2018 For Mac

Name of the Vulnerable Software and Affected Versions: Quicken Deluxe 2018 for Mac version 5.2.2 Description: An information disclosure issue exists in the password protection functionality. A specially crafted sqlite3 request can remove the password protection, allowing access and modification o...