Approved changes feed: RSS · Atom

cpe:2.3:a:intuit:quicken_2018:5.2.2:*:*:*:deluxe:macos:*:*

part: a version: 5.2.2 update: *

VendorIntuit (6d5ef895-61c8-53c2-a937-b9530a18eef4)
ProductQuicken 2018 (c08874ca-f1eb-5e68-b60d-4f94f08b0cfb)
Edition*
Language*
Software editiondeluxe
Target softwaremacos
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3854 vulnerable 2026-06-08 05:11:41.359844 Details available
HIGH (7.1)
An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2018 for Mac version 5.2.2. A specially crafted sqlite3 request can cause the removal of the password protection, allowing an attacker to access and modify the data without knowing the password. An attacker needs to have access to the password-protected files to trigger this vulnerability.
Published: 2018-12-03T22:00:00.000Z
Updated: 2024-08-05T04:57:24.260Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.