Lucene search
Veracode Vulnerability DatabaseVERACODE:34763HistoryMar 21, 2022 - 11:00 a.m.
Improper Verification Of Signature
2022-03-2111:00:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
improper verification
cryptographic signature
node-forge software
vulnerability
signature forge attack
EPSS
0.001
Percentile
36.5%
node-forge is vulnerable to improper verification of the cryptographic signature. The vulnerability exists due to improper signature verification of tailing garbage bytes in the rsa.js file allowing an attacker to execute a signature forge attack
Related
github
github
Improper Verification of Cryptographic Signature in node-forge
2022-03-18 23:10:28
ibm
ibm
osv
osv
CVE-2022-24772
2022-03-18 14:15:10
Improper Verification of Cryptographic Signature in node-forge
2022-03-18 23:10:28
debiancve
debiancve
CVE-2022-24772
2022-03-18 14:15:10
ubuntucve
ubuntucve
CVE-2022-24772
2022-03-18 00:00:00
nvd
nvd
CVE-2022-24772
2022-03-18 14:15:10
cve
cve
CVE-2022-24772
2022-03-18 14:15:10
cvelist
cvelist
redhatcve
redhatcve
CVE-2022-24772
2022-03-23 21:03:33
prion
prion
Code injection
2022-03-18 14:15:00
nessus
nessus
RHEL 8 : pcs (Unpatched Vulnerability)
2024-06-03 00:00:00
redhat
redhat