CVE-2021-41832CWE-347

Content Manipulation with Certificate Validation Attack

published October 11, 2021

CVSS
—
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25635 for the LibreOffice advisory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01343 · 71.2th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2021-10-11T08:10Z
EPSS history
Timeline
  • 11 OCT 08:10Z
    Content Manipulation with Certificate Validation Attack
    cvelistv5