Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-14243

Mirror-registry: openshift mirror registry: user enumeration via authentication error messages

Description

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat mirror registry for Red Hat OpenShift

Default version status: affected

Red Hat mirror registry for Red Hat OpenShift 2

Default version status: affected

References