CVE Database›Document archive›CVE-2022-26307

CVE-2022-26307

libreoffice: Weak Master Keys

Loading…

Severity

Moderate

Red Hat Product Security

8.8

CVSS 3.1

Review impact separately from score.

Published · July 25, 2022

Updated · November 22, 2025

Description

A flaw was found in LibreOffice, where the master key was poorly encoded, resulting in weakening its entropy from 128 to 43 bits. This issue makes the stored passwords that are encrypted with a single master key provided by the user vulnerable to a brute force attack if an attacker has access to the user’s stored config.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE not specified