Interpretation conflict in node-forge - CVE-2025-12816

Vulnerability identifier: #VU119131

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-12816

CWE-ID: CWE-436

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass downstream cryptographic verification and security decisions.

The vulnerability exists due to incorrect validation of ASN.1 structures within the asn1.validate() function in forge/lib/asn1.js. A remote non-authenticated attacker can use specially crafted ASN.1 structures to desynchronize DER schema validations and bypass downstream cryptographic verification and security decisions.

node-forge
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Multi-Linux Manager Client Tools for SLE Micro
SUSE Manager Client Tools for SLE Micro
SUSE Linux Enterprise Micro
SUSE Multi-Linux Manager Client Tools for SLE
SUSE Manager Client Tools for SLE
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Package Hub 15
openSUSE Leap
Voice Gateway
watsonx.data integration (Data Observability)
Cognos Analytics Mobile (iOS)
Cognos Analytics Mobile (Android)
watsonx Orchestrate Developer Edition
watsonx Code Assistant On Prem
WatsonX BI Assistant
watsonx.data integration
Maximo Application Suite - Visual Inspection Component
Developer Hub
Quay
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM Sterling Secure Proxy
IBM Sterling External Authentication Server
IBM Sterling Connect:Direct Web Services
App Connect Enterprise Certified Container
BIG-IQ Centralized Management
mgrctl-debuginfo
mgrctl-bash-completion
mgrctl-zsh-completion
mgrctl
mgrctl-lang
firewalld-prometheus-config
golang-github-QubitProducts-exporter_exporter
golang-github-prometheus-promu-debuginfo
golang-github-prometheus-promu
prometheus-blackbox_exporter
prometheus-blackbox_exporter-debuginfo
golang-github-prometheus-alertmanager-debuginfo
golang-github-prometheus-alertmanager
golang-github-lusitaniae-apache_exporter-debuginfo
golang-github-lusitaniae-apache_exporter
dracut-saltboot
golang-github-prometheus-node_exporter
golang-github-prometheus-node_exporter-debuginfo
golang-github-boynux-squid_exporter
golang-github-boynux-squid_exporter-debuginfo
golang-github-prometheus-prometheus-debuginfo
golang-github-prometheus-prometheus
release-notes-susemanager-proxy
release-notes-susemanager
spacecmd
python2-rhnlib
python3-rhnlib
python2-uyuni-common-libs
mgr-push
python2-mgr-push
supportutils-plugin-susemanager-client
python3-uyuni-common-libs
python3-mgr-push
spacewalk-client-tools
python2-spacewalk-client-tools
python3-spacewalk-client-tools
grafana
grafana-debuginfo

Install updates from vendor's website.

node-forge - update to 1.3.2
Voice Gateway - addressed in versions 1.0.8.16, 1.0.8.28
watsonx.data integration (Data Observability) - update to 1.0.14
Cognos Analytics Mobile (iOS) - update to 1.1.26
Cognos Analytics Mobile (Android) - update to 1.1.26
watsonx Orchestrate Developer Edition - update to 2.3.0
Developer Hub - update to 1.7.4
Quay - update to 3.16.1
watsonx Code Assistant On Prem - update to 5.3.1
WatsonX BI Assistant - update to 5.3
watsonx.data integration - update to 5.3.1
IBM Sterling Secure Proxy - addressed in versions 6.1.0.3, 6.2.0.3, 6.2.1.1
IBM Sterling External Authentication Server - addressed in versions 6.1.0.4, 6.1.1.1
IBM Sterling Connect:Direct Web Services - addressed in versions 6.3.0.19, 6.4.0.8
Maximo Application Suite - Visual Inspection Component - addressed in versions 9.0.16, 9.1.7
App Connect Enterprise Certified Container - update to 12.19.0
mgrctl-debuginfo - addressed in versions 0.1.38-150000.1.30.1, 5.1.24-150002.3.9.1
mgrctl-bash-completion - addressed in versions 0.1.38-150000.1.30.1, 5.1.24-120002.3.9.1, 5.1.24-150002.3.9.1
mgrctl-zsh-completion - addressed in versions 0.1.38-150000.1.30.1, 5.1.24-120002.3.9.1, 5.1.24-150002.3.9.1
mgrctl - addressed in versions 0.1.38-150000.1.30.1, 5.1.24-120002.3.9.1, 5.1.24-150002.3.9.1
mgrctl-lang - addressed in versions 0.1.38-150000.1.30.1, 5.1.24-120002.3.9.1, 5.1.24-150002.3.9.1
firewalld-prometheus-config - addressed in versions 0.1-150000.3.67.1, 0.1-150002.3.3.1
golang-github-QubitProducts-exporter_exporter - addressed in versions 0.4.0-120002.3.3.1, 0.4.0-150000.1.21.1, 0.4.0-150002.3.3.1
golang-github-prometheus-promu-debuginfo - update to 0.17.0-150000.3.30.1
golang-github-prometheus-promu - update to 0.17.0-150000.3.30.1
prometheus-blackbox_exporter - addressed in versions 0.26.0-120002.3.3.1, 0.26.0-150000.1.30.2, 0.26.0-150002.3.3.1
prometheus-blackbox_exporter-debuginfo - update to 0.26.0-120002.3.3.1
golang-github-prometheus-alertmanager-debuginfo - addressed in versions 0.28.1-120002.4.6.1, 0.28.1-150002.4.6.1
golang-github-prometheus-alertmanager - addressed in versions 0.28.1-120002.4.6.1, 0.28.1-150002.4.6.1
golang-github-lusitaniae-apache_exporter-debuginfo - addressed in versions 1.0.10-120002.3.3.1, 1.0.10-150000.1.26.1, 1.0.10-150002.3.3.1
golang-github-lusitaniae-apache_exporter - addressed in versions 1.0.10-120002.3.3.1, 1.0.10-150000.1.26.1, 1.0.10-150002.3.3.1
dracut-saltboot - addressed in versions 1.1.0-150000.1.65.1, 1.1.0-150002.3.6.1
golang-github-prometheus-node_exporter - addressed in versions 1.9.1-120002.3.3.1, 1.9.1-150002.3.3.1
golang-github-prometheus-node_exporter-debuginfo - addressed in versions 1.9.1-120002.3.3.1, 1.9.1-150002.3.3.1
golang-github-boynux-squid_exporter - addressed in versions 1.13.0-120002.3.3.1, 1.13.0-150000.1.12.1, 1.13.0-150002.3.3.1
golang-github-boynux-squid_exporter-debuginfo - addressed in versions 1.13.0-120002.3.3.1, 1.13.0-150000.1.12.1, 1.13.0-150002.3.3.1
golang-github-prometheus-prometheus-debuginfo - addressed in versions 3.5.0-120002.3.3.1, 3.5.0-150002.3.3.1
golang-github-prometheus-prometheus - addressed in versions 3.5.0-120002.3.3.1, 3.5.0-150000.3.67.1, 3.5.0-150002.3.3.1
release-notes-susemanager-proxy - update to 4.3.17-150400.3.107.1
release-notes-susemanager - update to 4.3.17-150400.3.151.1
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.18.25, 4.19.20
spacecmd - addressed in versions 5.0.15-150000.3.142.1, 5.1.12-120002.3.6.1, 5.1.12-150002.3.6.1
python2-rhnlib - update to 5.1.4-120002.3.6.1
python3-rhnlib - update to 5.1.4-150002.3.6.1
python2-uyuni-common-libs - update to 5.1.5-120002.3.3.1
mgr-push - addressed in versions 5.1.5-120002.3.6.1, 5.1.5-150002.3.6.2
python2-mgr-push - update to 5.1.5-120002.3.6.1
supportutils-plugin-susemanager-client - addressed in versions 5.1.5-120002.3.6.1, 5.1.5-150002.3.6.1
python3-uyuni-common-libs - update to 5.1.5-150002.3.3.1
python3-mgr-push - update to 5.1.5-150002.3.6.2
spacewalk-client-tools - addressed in versions 5.1.8-120002.3.6.1, 5.1.8-150002.3.6.1
python2-spacewalk-client-tools - update to 5.1.8-120002.3.6.1
python3-spacewalk-client-tools - update to 5.1.8-150002.3.6.1
grafana - addressed in versions 11.5.10-120002.4.9.1, 11.5.10-150002.4.9.1, 11.6.11-150000.1.90.1
grafana-debuginfo - addressed in versions 11.5.10-120002.4.9.1, 11.5.10-150002.4.9.1, 11.6.11-150000.1.90.1

• https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq

• Multiple vulnerabilities in node-forge
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Red Hat Quay 3.16
• Multiple vulnerabilities in IBM Voice Gateway
• Interpretation conflict in BIG-IQ Centralized Management Node-forge component
• IBM Maximo Application Suite - Visual Inspection Component update for node-forge
• Multiple vulnerabilities in Red Hat Developer Hub 1.7
• Multiple vulnerabilities in IBM Sterling External Authentication Server
• SUSE update for Security update 5.1.2 for Multi-Linux Manager Client Tools
• SUSE update for Security update 5.1.2 for Multi-Linux Manager Client Tools
• Multiple vulnerabilities in IBM Sterling Secure Proxy
• Multiple vulnerabilities in IBM watsonx Code Assistant On Prem
• Multiple vulnerabilities in IBM WatsonX BI Assistant for CP4D
• Multiple vulnerabilities in IBM watsonx.data integration
• Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition
• SUSE update for Security update 5.0.7 for Multi-Linux Manager Client Tools
• SUSE update for Maintenance update for Multi-Linux Manager 4.3 Release Notes Release Notes
• IBM watsonx.data integration (Data Observability) update for node-forge
• Multiple vulnerabilities in IBM Cognos Analytics Mobile
• Multiple vulnerabilities in IBM Sterling Connect:Direct Web Services
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.18
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.19