VULNERABILITY INTELLIGENCE

CVE-2025-14243

CVSS score5.3 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-04-08
Last modified2026-07-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

Weakness classification

  • secalert@redhat.com: CWE-209

Primary references