Weakness (CWE)
CWE-525: Use of Web Browser Cache Containing Sensitive Information
Variant Incomplete
The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.
How to prevent it (4 mitigations)
-
Architecture and Design
Protect information stored in cache.
-
Implementation
Use a restrictive caching policy for forms and web pages that potentially contain sensitive information, such as "no-cache" in the Cache-Control header.
-
Architecture and Design
Do not store unnecessarily sensitive information in the cache.
-
Architecture and Design
Consider using encryption in the cache.
Source: MITRE CWE-525
0 results · Clear filters · Feed
Nothing found.