CVE-2021-41831: Timestamp Manipulation with Signature Wrapping
It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache OpenOfficeto a version that resolves this vulnerability.Fixed in 4.1.11Patch CVE-2021-25634
Event History
Frequently Asked Questions
What is CVE-2021-41831?
CVE-2021-41831 is a vulnerability that allows an attacker to manipulate the timestamp of signed documents in Apache OpenOffice versions up to 4.1.10.
How severe is CVE-2021-41831?
CVE-2021-41831 has a severity rating of 5.3, which is considered medium.
How can an attacker exploit CVE-2021-41831?
An attacker can exploit CVE-2021-41831 by manipulating the timestamp of signed documents, potentially leading to unauthorized changes to the document.
How can I protect myself from CVE-2021-41831?
To protect yourself from CVE-2021-41831, it is recommended to update to Apache OpenOffice version 4.1.11 or later.
Where can I find more information about CVE-2021-41831?
More information about CVE-2021-41831 can be found at the following references: [Reference 1](https://lists.apache.org/thread.html/ra74d5057cdc781a36286a83e8bcbc90a7678f030ae73339c35dfc4f9%40%3Cusers.openoffice.apache.org%3E) [Reference 2](https://lists.apache.org/thread.html/rc5c277cb83e335696657c5f27da1d1e2b5cb48346b0b55415a233757@%3Cannounce.apache.org%3E)