CVE-2021-41831

It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.

Score

CVSS 3.1 5.3 Medium

Status

Modified - security@apache.org

Published

2021-10-11

Last modified

2024-08-04

Weaknesses

CWE-347

Affected products

• Openoffice (Apache)
• Apache Openoffice (Apache Software Foundation)

References

• https://lists.apache.org/thread.html/ra74d5057cdc781a36286a83e8bcbc90a7678f030ae73339c35dfc4f9%40%3Cusers.openoffice.ap…
• https://lists.apache.org/thread.html/rc5c277cb83e335696657c5f27da1d1e2b5cb48346b0b55415a233757%40%3Cannounce.apache.org…