Skip to content
OpenAdvisories

Weakness (CWE)

CWE-524: Use of Cache Containing Sensitive Information

Base Incomplete

The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.

How to prevent it (3 mitigations)

  1. Architecture and Design

    Protect information stored in cache.

  2. Architecture and Design

    Do not store unnecessarily sensitive information in the cache.

  3. Architecture and Design

    Consider using encryption in the cache.

Source: MITRE CWE-524

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.