KLA12328 OSI vulnerability in LibreOffice

An improper Certificate Validation vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions.

Original advisories

Content Manipulation with Certificate Validation Attack

Related products

LibreOffice

CVE list

CVE-2021-25635 unknown

Solution

Update to the latest version

Download LibreOffice

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• LibreOffice earlier than 7.0.5LibreOffice 7.1.x earlier than 7.1.1