Thomson Reuters UltraTax CS 2017

CPE Details

Thomson Reuters UltraTax CS 2017
thomsonreuters
ultratax_cs
2017
2018-09-25
16h29 +00:00
2021-08-12
14h33 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:thomsonreuters:ultratax_cs:2017:*:*:*:*:*:*:*

Informations

Vendor

thomsonreuters

Product

ultratax_cs

Version

2017

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2018-14608 2018-07-26 20h00 +00:00 Thomson Reuters UltraTax CS 2017 on Windows has a password protection option; however, the level of protection might be inconsistent with some customers' expectations because the data is directly accessible in cleartext. Specifically, it stores customer data in unique directories (%install_path%\WinCSI\UT17DATA\client_ID\file_name.XX17) that can be bypassed without authentication by examining the strings of the .XX17 file. The strings stored in the .XX17 file contain each customer's: Full Name, Spouse's Name, Social Security Number, Date of Birth, Occupation, Home Address, Daytime Phone Number, Home Phone Number, Spouse's Address, Spouse's Daytime Phone Number, Spouse's Social Security Number, Spouse's Home Phone Number, Spouse's Occupation, Spouse's Date of Birth, and Spouse's Filing Status.
7.5
Haute