https://bugs.freedesktop.org/show_bug.cgi?id=71281
Priority: medium
Bug ID: 71281
Assignee: [email protected]
Summary: [SECURITY] Password removed from ODS file when saving
to XLS, XLT...
Severity: major
Classification: Unclassified
OS: Windows (All)
Reporter: [email protected]
Hardware: Other
Status: NEW
Version: 4.1.3.2 rc
Component: Spreadsheet
Product: LibreOffice
Created attachment 88730
--> https://bugs.freedesktop.org/attachment.cgi?id=88730&action=edit
Test password file
This is a security breach bug.
Take any password protected ODS file. For example I made simple ODS file,
locked down sheet and document, you cannot even select cells.
1. Open attached file.
2. Save As -> XLS file
3. You will be prompted that passwords aren't hash compatible and if you want
to select new password.
4. Select to rewrite password and then select to remove password.
5. After you finish, go to TOOLS - PROTECT DOCUMENT and remove protection from
sheet and document.
In 4th step, you can also choose new password instead of removing old, you just
need to uncheck "Same password as old password" checkbox.
This affects XLS, XLT, but not XLSX.
Not sure if it affects other formats.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
