CVE-2025-13478: Cache Misconfiguration Leading to Cross-User Data Exposure
Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2(v4.10.1).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13478?
CVE-2025-13478 is classified as a medium severity vulnerability due to its potential to expose sensitive user data.
How do I fix CVE-2025-13478?
To remediate CVE-2025-13478, it is recommended to apply the latest security patches provided by OpenText for Identity Manager version 25.2.
Who is affected by CVE-2025-13478?
CVE-2025-13478 affects remote authenticated users of OpenText Identity Manager version 25.2 on Windows and Linux.
What type of vulnerability is CVE-2025-13478?
CVE-2025-13478 is a cache misconfiguration vulnerability that can lead to cross-user data exposure.
What can attackers gain from CVE-2025-13478?
Attackers exploiting CVE-2025-13478 can potentially access another user's session data through insecure cache handling.