CVE-2025-14243
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Mirror-registry: openshift mirror registry: user enumeration via authentication error messages
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
mirror registry for Red Hat OpenShift
- Vendor
- Red Hat
- Product
- mirror registry for Red Hat OpenShift
- Platforms
- Unknown
- Default status
affected- Package
- openshift/mirror-registry-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
mirror registry for Red Hat OpenShift 2
- Vendor
- Red Hat
- Product
- mirror registry for Red Hat OpenShift 2
- Platforms
- Unknown
- Default status
affected- Package
- openshift/mirror-registry-rhel8
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.