CVE Catalog
CVE-2025-14243
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
A flaw in OpenShift Mirror Registry allows an unauthenticated remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.
Risk Assessment
An attacker can compile a list of valid users, facilitating social engineering or brute-force password attacks.
Recommendation
Update OpenShift Mirror Registry to a version that standardizes error messages to prevent user enumeration.
Original NVD description (English source)
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.