CVE-2025-14243

Published: Apr 8, 2026Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

Affected (2)

Products: Redhat: Mirror Registry For Red Hat Openshift

Redhat

1 product

Mirror Registry For Red Hat Openshift

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Mirror Registry For Red Hat Openshift	All versions
Redhat Mirror Registry For Red Hat Openshift	Version 2.0

Related CWEs

CWE-209

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (2)

https://access.redhat.com/security/cve/CVE-2025-14243

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2419829

Source: secalert@redhat.com

Issue TrackingVendor Advisory

Timeline

No history available yet.