CAPEC-204 Lifting Sensitive Data Embedded in Cache
abstraction: detailedstatus: activeAn adversary examines a target application's cache, or a browser cache, for sensitive information. Many applications that communicate with remote entities or which perform intensive calculations utilize caches to improve efficiency. However, if the application computes or receives sensitive information and the cache is not appropriately protected, an attacker can browse the cache and retrieve this information. This can result in the disclosure of sensitive information.
severity: Medium
01
weaknesses (4)
The CWE weakness classes this flaw belongs to.
02
ATT&CK techniques
ATT&CK techniques this enables or maps to.
03
related attack patterns (1)
Related entries.
04
source
Where this definition is published.