Lucene search
Veracode Vulnerability DatabaseVERACODE:34759HistoryMar 21, 2022 - 9:26 a.m.
Improper Signature Verification
2022-03-2109:26:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
signature verification
remote attackers
digital certificates
EPSS
0.001
Percentile
26.7%
node-forge uses improper signature verification. Leniency in checking the digest algorithm structure allows remote attackers to specifically craft a structure that steals padding bytes and uses unchecked portion of the PKCS#1 encoded message to forge a signature when a low public exponent is being used.
Related
ibm
ibm
osv
osv
CVE-2022-24771
2022-03-18 14:15:10
Improper Verification of Cryptographic Signature in node-forge
2022-03-18 23:09:54
nvd
nvd
CVE-2022-24771
2022-03-18 14:15:10
prion
prion
Code injection
2022-03-18 14:15:00
ubuntucve
ubuntucve
CVE-2022-24771
2022-03-18 00:00:00
github
github
Improper Verification of Cryptographic Signature in node-forge
2022-03-18 23:09:54
redhatcve
redhatcve
CVE-2022-24771
2022-03-23 21:03:33
cve
cve
CVE-2022-24771
2022-03-18 14:15:10
cvelist
cvelist
debiancve
debiancve
CVE-2022-24771
2022-03-18 14:15:10
nessus
nessus
RHEL 8 : pcs (Unpatched Vulnerability)
2024-06-03 00:00:00
redhat
redhat