8.4 High

CVE-2025-13478 Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to…

Description

Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2(v4.10.1).

Affected products and versions

Product	Affected versions	Fixed in
Identity Manager	Versions not published

Do you use Identity Manager?

Track this CVE Watch Identity Manager Check my SBOMs

www.cveye.io/en/cve/CVE-2025-13478

Timeline

Published March 27, 2026
Last modified March 27, 2026

References

docs.microfocus.com docs.microfocus.com
docs.microfocus.com docs.microfocus.com

Track this CVE