Lucene search

MitreCVE-2001-0465

HistorySep 18, 2001 - 4:00 a.m.

CVE-2001-0465

2001-09-1804:00:00

mitre

web.nvd.nist.gov

cybersecurity

local user exposure

nvd

cve

turbotax

sensitive information

passwords

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information.

Affected configurations

Nvd

Node

intuitturbo_tax

VendorProductVersionCPE
intuitturbo_tax*cpe:2.3:a:intuit:turbo_tax:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intuit	turbo_tax	*	cpe:2.3:a:intuit:turbo_tax::::::::

References

marc.info/?l=bugtraq&m=98653594732053&w=2

www.turbotax.com/atr/update/

exchange.xforce.ibmcloud.com/vulnerabilities/6622

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2001-0465