Intuit Lacerte 2017 for Windows in a client/server environment transfers the entire customer list in cleartext over SMB, which allows attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks via unspecified vectors. The customer list cont...
7.5CVSS
7.2AI Score
0.001EPSS
5.9CVSS
5.8AI Score
0.003EPSS