OpenText Identity Manager Cache Misconfiguration Vulnerability Allowing Session Data Access

A cache misconfiguration vulnerability has been identified in OpenText Identity Manager version 25.2 (v4.10.1) on both Windows and Linux. This vulnerability allows remote authenticated users to access another user's session data due to improper handling of application cache. The issue arises from insecure application cache management, which can be exploited to retrieve sensitive session information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to another user's session data, potentially allowing for session hijacking or impersonation.

Remediation

Users can update to OpenText Identity Manager version 25.2.0.0100 (v4.10.1.0100) to address this vulnerability. This patch is available through the Software License and Download portal.