title: Timestamp Manipulation with Signature Wrapping
description: It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory.
problem types: CWE-347 Improper Verification of Cryptographic Signature
affected:
{
product: Apache OpenOffice
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 4.1.10, status: affected, version: Apache OpenOffice, versionType: custom
lessThanOrEqual: 3.4, status: affected, version: OpenOffice.org, versionType: custom
}
metrics:
other: [
content: {'other': 'moderate'}
type: unknown
]