CVE-2018-11338 : Security Advisory and Response

Intuit Lacerte 2017 for Windows exposes sensitive customer data over SMB, potentially leading to unauthorized access and man-in-the-middle attacks.

Understanding CVE-2018-11338

What is CVE-2018-11338?

In a client/server setup, Intuit Lacerte 2017 for Windows transmits a complete customer list in plain text over SMB, risking unauthorized access to sensitive information and man-in-the-middle attacks.

The Impact of CVE-2018-11338

The vulnerability exposes a range of sensitive details, including full names, social security numbers, addresses, job titles, and more, making it a significant security risk.

Technical Details of CVE-2018-11338

Vulnerability Description

The flaw allows attackers to intercept the customer list during transmission, compromising sensitive data without the need for further exploitation.

Affected Systems and Versions

Intuit Lacerte 2017 for Windows
Older versions of Lacerte may also be vulnerable

Exploitation Mechanism

Attackers can exploit the vulnerability by sniffing the network to obtain sensitive information or by conducting man-in-the-middle attacks through unspecified methods.

Mitigation and Prevention

Immediate Steps to Take

Avoid transmitting sensitive data over unsecured protocols
Implement encryption for data transmission
Monitor network traffic for any suspicious activities

Long-Term Security Practices

Regularly update software to patch known vulnerabilities
Conduct security audits to identify and address potential weaknesses

Patching and Updates

Apply patches and updates provided by Intuit to address the vulnerability and enhance system security.