CVE-2021-41830CWE-347

Double Certificate Attack

published October 11, 2021

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01390 · 72.1th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2021-10-11T08:10Z
EPSS history
Timeline
  • 11 OCT 08:10Z
    Double Certificate Attack
    cvelistv5