[Libreoffice-bugs] [Bug 118011] New: Libre Office Crash (calc) prompts document recovery which, when completed, removes the password and requires save as to re-establish the password.

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=118011

            Bug ID: 118011
           Summary: Libre Office Crash (calc) prompts document recovery
                    which, when completed, removes the password and
                    requires save as to re-establish the password.
           Product: LibreOffice
           Version: 6.0.4.2 release
          Hardware: All
                OS: Windows (All)
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Calc
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: nathanfishercontact at gmail.com

Description:
When Libre Office crashes with calc open, it will prompt recovery when
restarting the program. Document recovery will remove any password protection
on that document. In order to maintain a password after recovery you need to
save as in order to recheck the password option and re-enter the desired
password. 

This is a huge issue if anyone that really wants to get into a document that is
password protected could potentially figure out how to use this exploit to
eliminate any password protection. 

Steps to Reproduce:
1.Open a file that is password protected
2.End task through task manager
3.Reopen calc
4.Perform document recovery
5.Save document
6.Exit document
7.Reopen document and notice lack of password protection

Actual Results:  
Document goes from password protected to not requiring a password until user
Save As document and ensures password option is checked. 

Expected Results:
See above


Reproducible: Always


User Profile Reset: No



Additional Info:


User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/20100101
Firefox/60.0

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180605/fe0c6c41/attachment.html>