CVE-2025-14243

5.3 mediumEPSS 0.3%

Medium (5.3) in redhat mirror registry for red hat openshift. EPSS 0.3% chance of exploitation in the next 30 days.

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-209
Published: 2026-04-08
Modified: 2026-07-25
Record from: the NVD, synced 2026-10-19

Affected

redhat:mirror_registry_for_red_hat_openshift

References

https://access.redhat.com/security/cve/CVE-2025-14243
https://bugzilla.redhat.com/show_bug.cgi?id=2419829

Check your stack JSON