CWE-525

Use of Web Browser Cache Containing Sensitive Information

Medium

Description

The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.

Potential Impact

How to Fix

Architecture and Design

Protect information stored in cache.

Architecture and Design

Use a restrictive caching policy for forms and web pages that potentially contain sensitive information.

Architecture and Design

Do not store unnecessarily sensitive information in the cache.

Architecture and Design

Consider using encryption in the cache.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-525 vulnerabilities in your codebase.

Get Security Assessment