Detections
Analytics

Alpine: multiple libreoffice packages: security update to 6.4.3.2-r0

medium Tenable Cloud Security Plugin ID 405258

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On
 restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the
 recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF
 file format, then affected versions of LibreOffice default that subsequent saves of the document are
 unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while
 believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4
 series versions prior to 6.4.3. (CVE-2020-12801)

See Also

https://security.alpinelinux.org/vuln/CVE-2020-12801

Plugin Details

Severity: Medium

ID: 405258

Version: Revision 1.28

Type: Local

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 1.2

Percentile: 0.01

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2020-12801

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 5/18/2020

Reference Information

CVE: CVE-2020-12801