Weaknesses of type CWE-524

92 results

Cache com Informações Sensíveis

A aplicação armazena dados sensíveis (senhas, tokens, PII) em cache sem proteção adequada, permitindo que um atacante com acesso ao sistema recupere essas informações. O risco é que o cache persista além da sessão ou seja acessível a outros usuários/processos.

Example

Um navegador cacheia credenciais de login em histórico ou localStorage sem criptografia; um servidor de aplicação mantém tokens JWT em cache em memória compartilhada; um browser salva respostas HTTP contendo dados pessoais em cache local onde outro usuário da máquina consegue ler.

How to mitigate

Nunca cachear dados sensíveis ou, se necessário, use criptografia forte e TTL (tempo de expiração) curto. Configure headers HTTP (Cache-Control: no-store, no-cache) para impedir cache de respostas com PII, e limpe cache na logout/fim de sessão. Em armazenamento local (localStorage/sessionStorage), evite sensíveis; use memória efêmera.

CVE-2026-35193LOWPotential exposure of private data via missing Vary: Authorization in UpdateCacheMiddlewareEPSS 0.4%CVE-2024-12314HIGHRapid Cache <= 1.2.3 - Unauthenticated Cache PoisoningEPSS 0.4%CVE-2026-6907LOWPotential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddlewareEPSS 0.4%CVE-2024-49580MEDIUMIn JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosureEPSS 0.4%CVE-2025-57752MEDIUMNext.js Affected by Cache Key Confusion for Image Optimization API RoutesEPSS 0.3%CVE-2026-94386MEDIUMApache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token CacheEPSS 0.3%CVE-2026-118489HIGHCachingWebClient shares user-specific HTTP responses across users via the shared cache tierEPSS 0.3%CVE-2026-41841MEDIUMSpring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFluxEPSS 0.3%CVE-2026-88059MEDIUMAngular: Information Leak via `HttpTransferCache` Bypass When Using `withRequestsMadeViaParent`EPSS 0.3%CVE-2026-64648MEDIUMNext.js: Response Body Cache Confusion for Requests Containing BodiesEPSS 0.3%CVE-2026-59903MEDIUMNetty: Cache Poisoning and Information Disclosure via CORS Vary Header OverwriteEPSS 0.3%CVE-2025-69202MEDIUMaxios-cache-interceptor Vulnerable to Cache Poisoning via Ignored HTTP Vary HeaderEPSS 0.3%CVE-2026-49858MEDIUMAPI Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gateEPSS 0.3%CVE-2025-14806MEDIUMIBM Planning Analytics Information DisclosureEPSS 0.3%CVE-2026-84933MEDIUMundici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared cachesEPSS 0.3%CVE-2025-61598MEDIUMDiscourse is missing Cache-Control response header on error responsesEPSS 0.3%CVE-2026-120474MEDIUMundici vulnerable to cross-user cache disclosure via same-origin redirectEPSS 0.3%CVE-2026-0281LOWPAN-OS: Information Disclosure Vulnerability in Management Web InterfaceEPSS 0.3%CVE-2026-109217MEDIUMPDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment CacheEPSS 0.3%CVE-2026-104006LOWSpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie CheckEPSS 0.3%