CWE-524Use of Cache Containing Sensitive Information

Description

The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.

Common consequences

• Confidentiality→Read Application Data
  If the cache is accessible to unauthorized actors, attackers can read the cache and obtain this sensitive information.

Potential mitigations

• Architecture and Design
  Protect information stored in cache.
• Architecture and Design
  Do not store unnecessarily sensitive information in the cache.
• Architecture and Design
  Consider using encryption in the cache.

Related CWEs

Recent CVEs classified under this CWE