CWE-524: Use of Cache Containing Sensitive Information
The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- honoHono: Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage5.3 Medium
- djangoproject djangoPotential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware2.3 Low
- vmware spring frameworkStatic resource cache poisoning in Spring MVC and WebFlux3.1 Low
- gofiber fibergithub.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters6.5 Medium
- nodejs undiciundici vulnerable to cross-user information disclosure via shared cache whitespace bypass5.9 Medium
- distribution, red hat multicluster engine for kubernetes, advanced cluster management for kubernetes 2 +7 more +9 moreDistribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation7.5 High
- ibm planning analytics localIBM Planning Analytics Information Disclosure5.7 Medium
- pallets flaskFlask session does not add `Vary: Cookie` header when accessed in some ways2.3 Low
- joinmastodon mastodonMastodon's signature-dependent ActivityPub collection responses cached under signature-independent keys (Web Cache Poisoning via `Rails.cache`)6.5 Medium
- honoHono cache middleware ignores "Cache-Control: private" leading to Web Cache Deception5.3 Medium
Umbraco.FormsNuGetUmbraco.Forms CDN may cache sensitive form uploads when processed by ImageSharp3.1 Low- chamilo lmsAn issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint...5.5 Medium
- arthurfiorette axios-cache-interceptor, axios-cache-interceptor axios cache interceptor +1 moreaxios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary Header6.0 Medium
- apple macosThe issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15...2.4 Low
- vercel next.jsNext.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications6.3 Medium
- vercel next.jsNext.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service6.3 Medium
- vercel next.jsNext.js: Response Body Cache Confusion for Requests Containing Bodies6.0 Medium
- brother industries, ltd. android app "brother iprint&scan"Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache...4.8 Medium
- edly tutorOverhang Tutor Discloses Sensitive Information due to Improper Cache-Control3.3 Low
- workos authkit-nextjsauthkit-nextjs may let session cookies be cached in CDNs8.0 High
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1,...4.3 Medium
- discourseDiscourse is missing Cache-Control response header on error responses6.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: improper handling of http vary header in libsoup caching5.9 Medium
- vercel next.jsNext.js Affected by Cache Key Confusion for Image Optimization API Routes6.2 Medium
- fortra core privileged access manager (boks)Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache5.5 Medium
- palo alto networks prisma access browserPrisma Access Browser: Inappropriate implementation in Cache5.1 Medium
- hcl software domino leapHCL Domino Volt and Domino Leap are affected by missing "no cache" headers3.2 Low
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by missing "no cache" headers3.2 Low
- hcl software leap, hcltech hcl leap +1 moreHCL Leap is affected by missing "no cache" headers3.2 Low
- megaoptim rapid cacheRapid Cache <= 1.2.3 - Unauthenticated Cache Poisoning7.2 High
- jetbrains ktorJetBrains Ktor information disclosure5.3 Medium
- directusDirectus's session is cached for OpenID and OAuth2 if `redirect` is not used7.4 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...6.3 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (webservices), business objects business intgelligence platform +2 moreInsecure Storage vulnerability in SAP BusinessObjects Business Intelligence Platform (Webservices)4.3 Medium
- red hat logging subsystem for red hat openshift, advanced cluster management for kubernetes 2, openshift container platform 4.13 +3 more +5 moreCoredns: cd bit response is cached and served later5.3 Medium
- shopwareShopware's session is persistent in Cache for 404 pages7.5 High
- hcl software sametimeHCL Sametime is impacted by an autocomplete enabled vulnerability4.0 Medium
- sap se commerce (occ api), sap commerce cloud, commerce hycom +2 moreInformation Disclosure vulnerability in SAP Commerce (OCC API)5.9 Medium
@apollo/servernpm,apollo-server-corenpm +1 moreBatched HTTP requests may set incorrect `cache-control` response headerNo score- apple ios, iphone os +1 moreThe issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app...5.5 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreUse of Cache Containing Sensitive Information in ikus060/rdiffweb4.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 Medium
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for...7.5 High
- atlassian jira, jira server +1 moreThe AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn...4.3 Medium
- kubernetes, netapp trident, redhat openshift container platform +2 morekubectl creates world-writeable cached schema files3.3 Low
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 moreThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks5.9 Medium
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns3.7 Low