An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.
Weakness
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B’s state.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Forge | Digitalbazaar | * | 1.3.1 (including) |
| Migration Toolkit for Virtualization 2.9 | RedHat | migration-toolkit-virtualization/mtv-console-plugin-rhel9:sha256:5d385ba67a8d8158790da4511586c190a24a194e2ccb10fcb7182b658a59c624 | * |
| Network Observability (NETOBSERV) 1.11.0 | RedHat | network-observability/network-observability-console-plugin-compat-rhel9:sha256:7ed8059b6fb8ccc57c6c6aca6c826e4b45db3079cdf6d2854dec467a94fe46ab | * |
| Network Observability (NETOBSERV) 1.11.0 | RedHat | network-observability/network-observability-console-plugin-rhel9:sha256:4cb55d496e82d09f2a9f57f1b676d24134b1e4f817e10d4535581d4cb2728502 | * |
| Red Hat Advanced Cluster Security 4.8 | RedHat | advanced-cluster-security/rhacs-main-rhel8:sha256:fe5172976364ca5ef1bd83d25b5a51497d51782ef30706ccbceae3db64d10019 | * |
| Red Hat Advanced Cluster Security 4.9 | RedHat | advanced-cluster-security/rhacs-main-rhel8:sha256:f49305d1e529f1be7d213f548cc6d49d958ff578eb4e41320250634497a1dfb2 | * |
| Red Hat Advanced Cluster Security 4.9 | RedHat | advanced-cluster-security/rhacs-main-rhel8:sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f | * |
| Red Hat Ceph Storage 8 | RedHat | rhceph/grafana-rhel9:sha256:25ba51881b0dbabd2911ec309a1aa881cfb8075605a6d50dac63751482a55d62 | * |
| Red Hat Developer Hub 1.7 | RedHat | rhdh/rhdh-hub-rhel9:sha256:29ada5e84c6b204cf518191a21bbd22de5cb53a61bc1812b1072ce5c28a235b2 | * |
| Red Hat Discovery 2 | RedHat | discovery/discovery-ui-rhel9:sha256:899bd7f941512d54af8ab369ca03028a7d27d05887ccce24bc12c7ccd3e4dbee | * |
| Red Hat multicluster global hub 1.4.4 | RedHat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9:sha256:945a8497173aaba167a71fb4a393714905dd2d00ede0a4eb09c00c4c59727414 | * |
| Red Hat multicluster global hub 1.5.3 | RedHat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9:sha256:65e1e93c8ea20fe257ac85c371404df1b13c1966e07b0b5d605ae30ef0cec42f | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-dashboard-rhel9:sha256:24f8d43160dc19c70e41cbbba12f688e1ac84a21077bf932aae7fea2ec24afb5 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-mod-arch-model-registry-rhel9:sha256:a17ebde45f294859d21882537c89af095a5893716f965f4866ac2acb307bc4a8 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:sha256:88fbe21741f4052b4fb118c652e5f39ae28937e8b60fad930945be8ac3351eec | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9:sha256:c35c95fa0511503853770594040357cba04649739f4a61f862f6ac4de8b636eb | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:sha256:0780f52efa6c68ea2fb6371edfbd8b703157c38911803985bb1a676c84e073b5 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:sha256:a202c9ec6be34c4be1793e4f9f348077f345c450e0fcd04071d5092f266df9b4 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:sha256:e18d2d006c8cd4e3d3816540e154f421e7550a96f73901a799c15a5b4fe576db | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:sha256:fa2b62d5001452ad077383bc63124f021bbef766fb104203a9a05bba87332d8e | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:sha256:3bdeae6f78230e1d966cf7a3f35ea821c808f40cc4c2abb7af9b1748f5611826 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:sha256:2b6b580b98ece481ae56d3106d1f555502482e158747dbfa696f5b8b01e69732 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9:sha256:b15df9b9947b193cf648102945059587d5f56353b3a2f97e148ec30c34ec3953 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9:sha256:267b5f0d8edc1ffa3cb8f069fd83483712c17de02d0d8568cd9bda0b2389ebf0 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9:sha256:47ebda63b857cae1475cb195d372db7a7a4ee729d286e1da386bdf5972d81482 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9:sha256:158c783d59cdbdb9028c4dd760632edd7295330b5dcebbe0017bff4089635c3a | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:sha256:fbe346eafcfbb867f595cbad5ea0190fabbabc61ad80a4be2265e0e2b0149f68 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:sha256:fec8bf2d539fd00df8854a723bae98b7e173c43153c3132ba459bc0e9a86ae35 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:sha256:b19482e4008ac03a39b432fb3056bb1ab372ef1617df5bbfe784bc2910b6827a | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:sha256:bcb20d34a700e232c713123cc3b55ab538261d4f185f5ec532ba8c432a91676c | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:sha256:85abac79e8d09b61a9fffb0b5d3fd2a3f9da65bad9573a72cecb878a81357dcf | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:sha256:dc4a277cebbdc373534b73a432085d3a4b502e3c189fe75da8f0441ff9d3ce2c | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-dashboard-rhel9:sha256:a15b54532e9e06d91abce8fd7becf2aa3bfbce56f231036e25e9ffed15760f74 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-mod-arch-model-registry-rhel9:sha256:86ca44b014be65651b83a49a38c0784dee640b491b935e3ed5f3d49d84d55362 | * |
| Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 | RedHat | devspaces/code-rhel9:sha256:aa1d96a9c1d9dbf2fe077748807de1e047a17a942a87688c269aa60537b5c6d4 | * |
| Red Hat OpenShift Service Mesh 2.6 | RedHat | openshift-service-mesh/kiali-ossmc-rhel8:sha256:c34b5d86b07705fd0d610ba37bb54a5612b6aba81f04e661b207a2eb0209bea2 | * |
| Red Hat OpenShift Service Mesh 2.6 | RedHat | openshift-service-mesh/kiali-rhel8:sha256:5fa584e152eb852c9f9dd2ec07c4857924a87470bb92934cbd48efdb0ca238ba | * |
| Red Hat OpenShift Service Mesh 3 | RedHat | openshift-service-mesh/kiali-ossmc-rhel9:sha256:a529baf5f8aef4932058b377ded468cc291c1c04a326c8e1d6275ad0bde495a2 | * |
| Red Hat OpenShift Service Mesh 3 | RedHat | openshift-service-mesh/kiali-rhel9:sha256:9ab887b31e9d45ef89acd26b0d2bd9aeb5fc7c87d0f296d605ed9fa5d8c6a50e | * |
| Red Hat OpenShift Service Mesh 3.1 | RedHat | openshift-service-mesh/kiali-ossmc-rhel9:sha256:53f1ed0ec0b57f5d35c51dda8d3490649c91c2596658f91e9e206c6fb476ee1a | * |
| Red Hat OpenShift Service Mesh 3.1 | RedHat | openshift-service-mesh/kiali-rhel9:sha256:00743a84647ebaac732100a5e224ec024d3dfa22a9a942b4df81d1042eac2493 | * |
| Red Hat OpenShift Service Mesh 3.2 | RedHat | openshift-service-mesh/kiali-ossmc-rhel9:sha256:64308943c63d677df745451e7a9b9136e23b815c9d1950d6cf46b53859834655 | * |
| Red Hat OpenShift Service Mesh 3.2 | RedHat | openshift-service-mesh/kiali-rhel9:sha256:7300cdba75b669bad1039d5b816e82b48cd3d7f5763b187e5a23538c6c98ff27 | * |
| Red Hat Quay 3.1 | RedHat | quay/quay-rhel8:sha256:b54b571ac2f245f1a2eb1c7cf0dff6bc24ca6b9706ab8ee2dca323d561238255 | * |
| Red Hat Quay 3.12 | RedHat | quay/quay-rhel8:sha256:e82aac09336b0a36d5bc896826891ec41714ea1e05aac345a49abc4915b255ee | * |
| Red Hat Quay 3.15 | RedHat | quay/quay-rhel8:sha256:a8daa359ab7a0bc9722b25fb87aa6fd253506632640bfe7f31c9c92868421ecb | * |
| Red Hat Quay 3.16 | RedHat | quay/quay-rhel9:sha256:87dff92ca84ba1c48bb87a276a660165c9d10475fd3067989b593a1fdce8e475 | * |
| Red Hat Quay 3.9 | RedHat | quay/quay-rhel8:sha256:8bd901f9d03817e599a73b4f4355236320bec1b803bd9507383277f27fde4319 | * |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/105.html
- https://cwe.mitre.org/data/definitions/273.html
- https://cwe.mitre.org/data/definitions/34.html