PT-2021-5591 · Document Foundation · Libreoffice

Published 2021-10-11 · Updated 2021-10-12 · CVE-2021-25632

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibreOffice (affected versions not specified)

Description The issue is related to errors in the certificate authentication procedure of LibreOffice, allowing a remote attacker to create an ODF document with a digital signature.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-254

CWE-295

Related Identifiers

BDU:2022-00025

CVE-2021-25632

MGASA-2021-0471

Affected Products

Libreoffice

References · 9

• https://osv.dev/vulnerability/MGASA-2021-0471 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0471.html · Security Note
• https://bdu.fstec.ru/vul/2022-00025 · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=29542 · Note
• https://cybersecurity-help.cz/vdb/SB2021051817 · Note
• https://wiki.documentfoundation.org/ReleaseNotes/7.2 · Note
• https://libreoffice.org/about-us/security/advisories/cve-2021-25635 · Note
• https://wiki.documentfoundation.org/ReleaseNotes/7.1 · Note
• https://libreoffice.org/about-us/security/advisories/cve-2021-25632 · Note