CVE-2021-41831 Timestamp Manipulation with Signature Wrapping

2021-10-1108:10:14

CWE-347

apache

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

JSON

It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.

CNA Affected

[
  {
    "product": "Apache OpenOffice",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "4.1.10",
        "status": "affected",
        "version": "Apache OpenOffice",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.4",
        "status": "affected",
        "version": "OpenOffice.org",
        "versionType": "custom"
      }
    ]
  }
]