Fallos del tipo CWE-524

92 resultados

Armazenamento de Informações Sensíveis em Cache

Ocorre quando dados sensíveis (senhas, tokens, chaves de API, dados pessoais) são armazenados em cache sem proteção adequada. Um atacante com acesso ao cache consegue recuperar essas informações comprometendo a segurança da aplicação.

Ejemplo

Um navegador ou aplicativo armazena em cache uma resposta HTTP contendo token de autenticação ou dados de cartão de crédito. Se o cache não for criptografado e o dispositivo for comprometido, o atacante extrai essas credenciais diretamente dos arquivos de cache.

Cómo mitigar

Marque respostas com dados sensíveis como não-cacheáveis (Cache-Control: no-store, no-cache), use criptografia para dados em cache e implemente limpeza automática de cache após logout ou timeout. Nunca armazene credenciais em cache localmente sem encriptação.

CVE-2019-9494—The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacksEPSS 3.9%CVE-2021-24027—A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third pEPSS 3.8%CVE-2019-9495—The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsEPSS 3.5%CVE-2019-14997—The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including theirEPSS 1.2%CVE-2026-25703HIGHPotential information leakage from manager /network/graph API in NeuVectorEPSS 0.8%CVE-2024-0874MEDIUMCoredns: cd bit response is cached and served laterEPSS 0.8%CVE-2026-82755MEDIUMash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusionEPSS 0.7%CVE-2024-45596HIGHDirectus's session is cached for OpenID and OAuth2 if `redirect` is not usedEPSS 0.7%CVE-2021-44854MEDIUMAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results froEPSS 0.7%CVE-2024-27917HIGHShopware's session is persistent in Cache for 404 pagesEPSS 0.6%CVE-2026-13007HIGHInsecure Public Caching on REST API Endpoints in Tenable Identity ExposureEPSS 0.6%CVE-2026-93748HIGHhttp-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleEPSS 0.6%CVE-2022-3292MEDIUMUse of Cache Containing Sensitive Information in ikus060/rdiffwebEPSS 0.6%CVE-2026-89186MEDIUMmpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared cachesEPSS 0.5%CVE-2023-37486MEDIUMInformation Disclosure vulnerability in SAP Commerce (OCC API)EPSS 0.5%CVE-2026-85317MEDIUMApache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token CacheEPSS 0.5%CVE-2026-24472MEDIUMHono cache middleware ignores "Cache-Control: private" leading to Web Cache DeceptionEPSS 0.5%CVE-2026-71316HIGHNuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clientsEPSS 0.5%CVE-2026-94543MEDIUMNext.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applicationsEPSS 0.5%CVE-2019-11244LOWkubectl creates world-writeable cached schema filesEPSS 0.5%