Test ID:	1.3.6.1.4.1.25623.1.0.834216
Category:	General
Title:	LibreOffice Improper Certificate Validation Vulnerability (Jul 2024) - Windows
Summary:	LibreOffice is prone to an improper; certificate validation vulnerability.
Description:	Summary: LibreOffice is prone to an improper certificate validation vulnerability. Vulnerability Insight: The flaw exists when TLS certificate is not properly verified when utilizing LibreOfficeKit. Vulnerability Impact: Successful exploitation allows an attacker to perform man-in-the-middle attacks, potentially intercepting or modifying data transmitted between LibreOffice (when used in LibreOfficeKit mode) and remote servers. Affected Software/OS: LibreOffice prior to version 24.2.4 on Windows. Solution: Update to version 24.2.4 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-5261 https://www.libreoffice.org/about-us/security/advisories/cve-2024-5261
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.