CVE-2018-3854

Name of the Vulnerable Software and Affected Versions Quicken Deluxe 2018 for Mac version 5.2.2

Description An information disclosure issue exists in the password protection functionality. A specially crafted sqlite3 request can remove the password protection, allowing access and modification of data without the password. The attacker must have access to the password-protected files to exploit this issue.

Recommendations For Quicken Deluxe 2018 for Mac version 5.2.2, consider restricting access to the password-protected files until a fix is available. As a temporary workaround, avoid using the sqlite3 request functionality that can trigger this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.