NOTE: This vulnerability was discovered in early April of 2018. I immediately contacted Intuit support and their security team to responsibly disclose the vulnerability. I offered suggestions and help in finding a solution to protect the public at no cost. As of 12/25/2018 the software remains vulnerable and I am disclosing my findings in hopes […]
Category Archives: CVEs
UltraTax CS Data Exposure Vulnerability CVE-2018-14608 & CVE-2018-14607
NOTE: This vulnerability was discovered in late July of 2018. I immediately contacted Thompson Reuter support, their sales team, and Tweeted to them to responsibly disclose the vulnerability. I offered suggestions and help in finding a solution to protect the public at no cost. CVE-2018-14608 CVE-2018-14607 After recent discoveries of the Intuit Lacerte data exposure […]