CVE-2025-13478 in OpenText Identity Manager
Summary
Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecure application cache handling. This issue affects Identity Manager: 25.2(v4.10.1).
Responsible
OpenText
Reservation
11/20/2025
Disclosure
03/27/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 353893 | OpenText Identity Manager Cache insufficiently protected credentials | 522 | Not defined | Not defined | CVE-2025-13478 |