title: Double Certificate Attack
description: It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advisory.
problem types: CWE-347 Improper Verification of Cryptographic Signature
affected:
{
product: Apache OpenOffice
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 4.1.10, status: affected, version: Apache OpenOffice, versionType: custom
lessThanOrEqual: 3.4, status: affected, version: OpenOffice.org, versionType: custom
}
metrics:
other: [
content: {'other': 'high'}
type: unknown
]