CVE-2025-13478

N/A

Description

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2(v4.10.1).

CVE Details

CVSS v3.1 ScoreN/A

Published3/27/2026

Last Modified3/30/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-522

References

https://docs.microfocus.com/doc/2159/25.2/cvesecurityfix(security@opentext.com)

https://docs.microfocus.com/doc/2159/25.2/releasenotesidentitymanager4101patch01(security@opentext.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.