Falhas do tipo CWE-524
92 resultadosArmazenamento de Informações Sensíveis em Cache
A aplicação armazena dados sensíveis (senhas, tokens, chaves, dados pessoais) em cache sem proteção adequada. Um atacante com acesso ao sistema de arquivos, memória ou cache compartilhado consegue recuperar essas informações, comprometendo contas e dados.
Exemplo
Um navegador cachea credenciais de login em texto plano no disco, ou uma API armazena tokens JWT no Redis compartilhado sem criptografia. Qualquer processo ou usuário com acesso ao cache extrai os dados sensíveis.
Como mitigar
Nunca cachear dados sensíveis, ou cacheá-los criptografados com chaves gerenciadas de forma segura. Use marcadores HTTP (Cache-Control: no-store, no-cache) e configure TTL agressivo. Limpe o cache ao fazer logout ou destruir sessões.
CVE-2019-9494—The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacksEPSS 3.9%CVE-2021-24027—A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third pEPSS 3.8%CVE-2019-9495—The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsEPSS 3.5%CVE-2019-14997—The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including theirEPSS 1.2%CVE-2026-25703HIGHPotential information leakage from manager /network/graph API in NeuVectorEPSS 0.8%CVE-2024-0874MEDIUMCoredns: cd bit response is cached and served laterEPSS 0.8%CVE-2026-82755MEDIUMash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusionEPSS 0.7%CVE-2024-45596HIGHDirectus's session is cached for OpenID and OAuth2 if `redirect` is not usedEPSS 0.7%CVE-2021-44854MEDIUMAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The REST API publicly caches results froEPSS 0.7%CVE-2024-27917HIGHShopware's session is persistent in Cache for 404 pagesEPSS 0.6%CVE-2026-13007HIGHInsecure Public Caching on REST API Endpoints in Tenable Identity ExposureEPSS 0.6%CVE-2026-93748HIGHhttp-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-staleEPSS 0.6%CVE-2022-3292MEDIUMUse of Cache Containing Sensitive Information in ikus060/rdiffwebEPSS 0.6%CVE-2026-89186MEDIUMmpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared cachesEPSS 0.5%CVE-2023-37486MEDIUMInformation Disclosure vulnerability in SAP Commerce (OCC API)EPSS 0.5%CVE-2026-85317MEDIUMApache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token CacheEPSS 0.5%CVE-2026-24472MEDIUMHono cache middleware ignores "Cache-Control: private" leading to Web Cache DeceptionEPSS 0.5%CVE-2026-71316HIGHNuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clientsEPSS 0.5%CVE-2026-94543MEDIUMNext.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applicationsEPSS 0.5%CVE-2019-11244LOWkubectl creates world-writeable cached schema filesEPSS 0.5%