Read the docs
TI-2022-17474 Aliases CVE-2022-37401GHSA-468w-rc5f-76wx

Apache OpenOffice Weak Master Keys

Priority MEDIUM 42CWE-331Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Apache OpenOffice supports the storage of passwords for web connections in the user's configuration database. The stored passwords are encrypted with a single master key provided by the user. A flaw in OpenOffice existed where master key was poorly encoded resulting in weakening its entropy from 128 to 43 bits making the stored passwords vulnerable to a brute force attack if an attacker has access to the users stored config. This issue affects: Apache OpenOffice versions prior to 4.1.13. Reference: CVE-2022-26307 - LibreOffice

Why it matters now

EPSS 0.01946 80th percentileScored 2026-11-07
Fix Fixed Apache OpenOffice (Apache Software Foundation): 4.1.13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache OpenOfficeApache OpenOffice 4 to before 4.1.134.1.13Patch availableCNA
  • Apache OpenOffice VendorApache Affected Apache OpenOffice 4 to before 4.1.13 Fixed in 4.1.13 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*before 4.1.13VulnerableApache
  • cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:* Versions before 4.1.13 Vulnerable ·Apache

Remediation

  • Fix · CNA Apache OpenOffice (Apache Software Foundation) Fixed in 4.1.13

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Apache OpenOffice 4.1.13

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2022-17473 Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web…Priority MEDIUM 40
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-37401
  2. 2026-10-03 Alias added: GHSA-468w-rc5f-76wx

References

Patch 1

Advisory 1

  • TI-2018-07474 An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache… CVSS 3.0HIGH 7.5
  • TI-2021-12639 Buffer overflow from a crafted DBF file CVSS 3.1HIGH 7.8
  • TI-2014-02850 Apache OpenOffice before 4.1.1 allows remote attackers to execute arbitrary commands and… CVSS 2.0HIGH 9.3
  • TI-2009-02810 Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in… CVSS 2.0HIGH 9.3
  • TI-2009-02809 Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in… CVSS 2.0HIGH 9.3
  • TI-2009-03144 filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to… CVSS 2.0HIGH 9.3
See all 71 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences