IBM OpenPages Web Cache Vulnerability Allowing Sensitive Information Exposure

A vulnerability in IBM OpenPages versions 9.0 and 9.1 has been identified, allowing web page cache to be stored locally and potentially read by another user on the system. This issue arises because some API responses use a caching directive that, while indicating the content is stale, may still be temporarily stored in browsers or intermediary caches. For sensitive information, this could lead to unauthorized access.

Impact

Exploitation of this vulnerability could result in the unauthorized exposure of sensitive information through cached web pages.

Remediation

Users of IBM OpenPages 9.1.1 can download the update from the IBM Support page. For IBM OpenPages 9.0, users should apply FixPack 5 (9.0.0.5) followed by Interim Fix 5 (9.0.0.5.5). Download links for these versions are available on the IBM Support website.