CVE-2024-37311CWE-295

Collabora Online's remote host TLS certificates are not fully verified

High · published August 23, 2024

CVSS v3.1
8.2
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

Collabora Online is a collaborative online office suite based on LibreOffice. In affected versions of Collabora Online, https connections from coolwsd to other hosts may incompletely verify the remote host's certificate's against the full chain of trust. This vulnerability is fixed in Collabora Online 24.04.4.3, 23.05.14.1, and 22.05.23.1.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00229 · 13.0th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2024-08-23T14:26Z
EPSS history
Timeline
  • 23 AUG 14:26Z
    Collabora Online's remote host TLS certificates are not fully verified
    cvelistv5