CWE-524

Use of Cache Containing Sensitive Information

Medium

Description

The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.

Potential Impact

How to Fix

Architecture and Design

Protect information stored in cache.

Architecture and Design

Do not store unnecessarily sensitive information in the cache.

Architecture and Design

Consider using encryption in the cache.

Detection Methods

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-524 vulnerabilities in your codebase.

Get Security Assessment