{"id":"CVE-2020-12801","details":"If LibreOffice has an encrypted document open and crashes, that document is auto-saved encrypted. On restart, LibreOffice offers to restore the document and prompts for the password to decrypt it. If the recovery is successful, and if the file format of the recovered document was not LibreOffice's default ODF file format, then affected versions of LibreOffice default that subsequent saves of the document are unencrypted. This may lead to a user accidentally saving a MSOffice file format document unencrypted while believing it to be encrypted. This issue affects: LibreOffice 6-3 series versions prior to 6.3.6; 6-4 series versions prior to 6.4.3.","modified":"2026-03-14T22:35:06.342024Z","published":"2020-05-18T15:15:11.003Z","related":["MGASA-2020-0258","SUSE-SU-2020:1530-1","SUSE-SU-2020:1731-1","openSUSE-SU-2020:0786-1","openSUSE-SU-2024:10983-1"],"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2023/12/msg00026.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00011.html"},{"type":"ADVISORY","url":"https://www.libreoffice.org/about-us/security/advisories/CVE-2020-12801"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libreoffice/core","events":[{"introduced":"0d66c7c726e1ede16bcfce1c4fcfdb30a46f06cc"},{"fixed":"129a60db424e2599f22e8d4ecddb07f8a1624d46"}],"database_specific":{"versions":[{"introduced":"6.4.0"},{"fixed":"6.4.3"}]}}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-12801.json","unresolved_ranges":[{"events":[{"introduced":"6.3.0"},{"fixed":"6.3.6"}]},{"events":[{"introduced":"0"},{"last_affected":"15.1"}]}],"vanir_signatures":[{"id":"CVE-2020-12801-42d0386b","signature_type":"Function","deprecated":false,"target":{"function":"Chart2ExportTest::testCrossBetweenODS","file":"chart2/qa/extras/chart2export.cxx"},"digest":{"length":312,"function_hash":"112346488749896510946958429826578704499"},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"},{"id":"CVE-2020-12801-66caf4b1","signature_type":"Line","deprecated":false,"target":{"file":"chart2/qa/extras/chart2export.cxx"},"digest":{"threshold":0.9,"line_hashes":["269229940422985949334327393235723096875","150178393803842199385879500729143774766","119724721202715139252776025501158600571","289868342165289478876981246002887798708","220856527954418128600113756508233179250","111662027942689248806648949361408038341","92975977315345249425439251203836172197","66148255043936545412486114566334047707","63886810412750009820549315939047486378","270549844970812713953388948500478548690","217951086691460144290419355966300019793","225531158194947820010227931109766951222","184329777066494342599088020785760295323","296994520143989077158133862755430231422","283103373786130313939916805040548163780","337658136245394764426712579747439658759","266978585474683219514938832116551598308","313577411692534617885369092791168909364"]},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"},{"id":"CVE-2020-12801-8a799d31","signature_type":"Function","deprecated":false,"target":{"function":"SeriesPlotterContainer::isCategoryPositionShifted","file":"chart2/source/view/main/ChartView.cxx"},"digest":{"length":400,"function_hash":"78606951956688918472172577471178944215"},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"},{"id":"CVE-2020-12801-9b579d4c","signature_type":"Function","deprecated":false,"target":{"function":"AxisConverter::convertFromModel","file":"oox/source/drawingml/chart/axisconverter.cxx"},"digest":{"length":8210,"function_hash":"56315025900708865496357424182474001309"},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"},{"id":"CVE-2020-12801-a3c0d578","signature_type":"Line","deprecated":false,"target":{"file":"chart2/source/view/main/ChartView.cxx"},"digest":{"threshold":0.9,"line_hashes":["107712184816061146995281488578626709306","300085373828234112268960959774862249543","275769828836013074820494002251524427999","29691256563866827949895442116300830661","176131858604223623443739141691829308277","104415623021870926443982827232703796802","204727147462927567620130679107924428354","295683400320346099021979282873145255160","226623992261199791208710077039695408941","95879012327435347233594685193580217203","102750351596961108763456045980927279452","25401837840837036850721179163470685286","68282176249778915149513807632432678312","227649965704388901435127454348993328077","137640157980885055957626893240280231122","11278048887455546216601223346158368790","298407814393668356057021985693738913524","17138743953480212239855793660893472645","4501029468648612735349462957632252995","120178696520520641959338769722589812558","249172730350293605514784414144614307885","162794486326949075818693037191190072535","316665533622909541898950098330116844645","121910706034377722627924183411633501485","111800338372243900768767722799594961064","106828439145796009007233241768942975001"]},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"},{"id":"CVE-2020-12801-cd822a2d","signature_type":"Function","deprecated":false,"target":{"function":"SeriesPlotterContainer::initializeCooSysAndSeriesPlotter","file":"chart2/source/view/main/ChartView.cxx"},"digest":{"length":5080,"function_hash":"167421413808275017026320070125743934838"},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"},{"id":"CVE-2020-12801-dfec689d","signature_type":"Line","deprecated":false,"target":{"file":"oox/source/drawingml/chart/axisconverter.cxx"},"digest":{"threshold":0.9,"line_hashes":["318425588666055456614460421201245391284","233001150357346037746518615718389141087","128449176116844681046026879812826024788","64985800834495018939287347706116470052"]},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"},{"id":"CVE-2020-12801-eea16a7b","signature_type":"Line","deprecated":false,"target":{"file":"chart2/source/model/template/ChartTypeTemplate.cxx"},"digest":{"threshold":0.9,"line_hashes":["259776796991168961270851703690618836005","136822413143814997243800081472645395372","243437766430776349799582692279061397763","202021085017887605093726223961524938813","100182050497959342530132089662381788436","231736766697470133055164172290158233476","293615077838626260238959545675491443415","150857528067181685523055140722085767206","290883502604213629397955637826567712585","291726262176469774656066635318758850668","179153992805376918691546755144745189368"]},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"},{"id":"CVE-2020-12801-ef24f7d5","signature_type":"Function","deprecated":false,"target":{"function":"SeriesPlotterContainer::initAxisUsageList","file":"chart2/source/view/main/ChartView.cxx"},"digest":{"length":1597,"function_hash":"142666520875385633595498569991673869532"},"source":"https://github.com/libreoffice/core/commit/129a60db424e2599f22e8d4ecddb07f8a1624d46","signature_version":"v1"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}