CVE-2025-14243

CVE-2025-14243 concerns the OpenShift Mirror Registry. The vulnerability allows an unauthenticated remote attacker to enumerate valid usernames and email addresses by eliciting different error messages during authentication failures and account creation. Affected component: OpenShift Mirror Regis...

The vulnerability of the software for creating local copies of deleted container registry entries, known as the Mirror registry for Red Hat OpenShift, arises from the unencrypted storage of critical information. This allows an intruder to gain unauthorized access to a Redis instance.

The vulnerability of the Mirror registry software for Red Hat OpenShift, which is used to create local copies of deleted container images, stems from the unencrypted storage of critical information in the config.yaml file of the Jinja templater. Exploiting this vulnerability could allow an attack...