CVE-2025-14243: falha de média gravidade em Red Hat mirror registry for Red Hat OpenShift
Mirror-registry: openshift mirror registry: user enumeration via authentication error messages
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Red Hat · mirror registry for Red Hat OpenShiftRed Hat · mirror registry for Red Hat OpenShift 2CVEs relacionadas — Red Hat mirror registry for Red Hat OpenShift
No mesmo produto, das mais perigosas para as menos.
CVE-2026-15927MEDIUMQuay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validationEPSS 0.6%CVE-2026-32590HIGHMirror-registry: remote code execution using pickle deserializationEPSS 0.5%CVE-2024-3622HIGHMirror-registry: plain-text default csrf secret keyEPSS 0.5%CVE-2024-3623MEDIUMMirror-registry: default database secret key stored in plain-text on initial configuration fileEPSS 0.4%CVE-2026-2377MEDIUMMirror-registry: quay: quay: server-side request forgery via log export functionalityEPSS 0.4%CVE-2024-3624HIGHMirror-registry: database user and password stored in plain-textEPSS 0.3%