CWE-524 Use of Cache Containing Sensitive Information
baseThe code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (97)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-41032US | high7.8 | Exploit | ||
NuGet Client Elevation of Privilege Vulnerability | ||||
| CVE-2021-24027US | high7.5 | Exploit | ||
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s externa… | ||||
| CVE-2026-59903US | high7.5 | Exploit | ||
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces a… | ||||
| CVE-2025-14177US | high7.5 | Exploit | ||
In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memo… | ||||
| CVE-2026-109829US | critical9.1 | — | ||
undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in th… | ||||
| CVE-2025-64762US | critical9.1 | — | ||
The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and belo… | ||||
| CVE-2026-84933US | high8.2 | — | ||
undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor strips that header. In shared cache mode, w… | ||||
| CVE-2026-93748US | high7.5 | — | ||
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retri… | ||||
| CVE-2026-14643US | high7.5 | — | ||
undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive. In undici from 7.0.0 up to befor… | ||||
| CVE-2026-50170US | high7.5 | — | ||
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2… | ||||
| CVE-2023-37517US | high7.5 | — | ||
Missing "no cache" headers in HCL Leap permits sensitive data to be cached. | ||||
| CVE-2023-45696US | high7.5 | — | ||
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser.
| ||||
| CVE-2023-37486US | high7.5 | — | ||
Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which would otherwise be rest… | ||||
| CVE-2026-0281US | high7.1 | — | ||
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web… | ||||
| CVE-2026-46309US | high7.0 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise
Add validation in xe_vm_madvise_ioctl(… | ||||
| CVE-2024-43428US | high7.1OT elevated | — | ||
To address a cache poisoning risk in Moodle, additional validation for local storage was required. | ||||
| CVE-2018-3615US | medium6.4 | — | ||
Systems with microprocessors utilizing speculative execution and Intel software guard extensions (Intel SGX) may allow unauthorized disclosure of information residing in the L1 dat… | ||||
| CVE-2025-69202US | medium6.5 | — | ||
Axios Cache Interceptor is a cache interceptor for axios. Prior to version 1.11.1, when a server calls an upstream service using different auth tokens, axios-cache-interceptor retu… | ||||
| CVE-2024-45596US | medium6.5 | — | ||
Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 wher… | ||||
| CVE-2024-41906US | medium6.5 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses… | ||||
04
attack patterns (1)
CAPEC attack patterns that exploit this.
05
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan