5.3
Medium
CVE-2025-14243 A flaw was found in the OpenShift Mirror Registry
Description
A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| mirror registry for Red Hat OpenShift | Versions not published | |
| mirror registry for Red Hat OpenShift 2 | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2419829 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of mirror registry for Red Hat OpenShift
The 20 CVEs of mirror registry for Red Hat OpenShift →
CVE-2026-85471
A flaw was found in Quay
6.4
Medium
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…
7.5
High
CVE-2026-32591
A flaw was found in Red Hat Quay's Proxy Cache configuration feature
5.2
Medium
CVE-2026-32590
A flaw was found in Red Hat Quay's handling of resumable container image layer uploads
7.1
High