CWEweakness
CWE-524 Use of Cache Containing Sensitive Information
- Abstraction
- Base
- Structure
- Simple
- Status
- Incomplete
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.
Common consequences
• Confidentiality: Read Application Data — If the cache is accessible to unauthorized actors, attackers can read the cache and obtain this sensitive information.
Potential mitigations
• [Architecture and Design] Protect information stored in cache.
• [Architecture and Design] Do not store unnecessarily sensitive information in the cache.
• [Architecture and Design] Consider using encryption in the cache.
Detection methods
• Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)
Observed examples
• CVE-2024-30127: Product does not set the "no-cache" option in the HTTP Cache-Control header, allowing sensitive information to be cached
Related
Attack pattern · CAPEC (1)
- CAPEC-204 Lifting Sensitive Data Embedded in Cache attack pattern
Observed example · CVE (1)
- CVE-2024-30127 Missing "no cache" headers in HCL Leap permits sensitive data to be cached. vulnerability
Child of · CWE (1)
- CWE-668 Exposure of Resource to Wrong Sphere weakness
Referenced by CAPEC · weakness (1)
- CAPEC-204 Lifting Sensitive Data Embedded in Cache attack pattern
Referenced by CVE · weakness (84)
- CVE-2026-94386 Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component. vulnerability
- CVE-2026-105711 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1… vulnerability
- CVE-2026-108088 ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. vulnerability
- CVE-2026-85317 Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. vulnerability
- CVE-2026-109829 undici is an HTTP client library for Node.js. vulnerability
- CVE-2026-104006 The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up… vulnerability
- CVE-2026-107851 Contao is an Open Source CMS. vulnerability
- CVE-2026-105752 vLLM is an inference and serving engine for large language models. vulnerability
- CVE-2026-94484 Next.js is a React framework for building full-stack web applications. vulnerability
- CVE-2026-94543 Next.js is a React framework for building full-stack web applications. vulnerability
- CVE-2026-94544 Next.js is a React framework for building full-stack web applications. vulnerability
- CVE-2026-103004 Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with… vulnerability
- CVE-2026-19202 A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across… vulnerability
- CVE-2026-93748 http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives,… vulnerability
- CVE-2026-89186 Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients… vulnerability
- CVE-2026-88059 Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. vulnerability
- CVE-2026-82755 Use of Cache Containing Sensitive Information vulnerability in ash-project ash_authentication_oauth2_server allows a shared HTTP cache to… vulnerability
- CVE-2026-84933 undici's cache interceptor does not handle the Set-Cookie response header anywhere in its cache path, so it neither refuses to store nor… vulnerability
- CVE-2026-15743 Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. vulnerability
- CVE-2026-54625 django CMS is a content management system powered by Django. vulnerability
- CVE-2026-59903 Netty is an asynchronous, event-driven network application framework. vulnerability
- CVE-2026-25703 NeuVector through 5.4.9 is can potentially leak information from manager /network/graph API due to missing authentication and cached data… vulnerability
- CVE-2026-71316 Nuxt is an open-source web development framework for Vue.js. vulnerability
- CVE-2026-14643 undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control… vulnerability
- CVE-2026-64648 Next.js is a React framework for building full-stack web applications. vulnerability
- CVE-2026-65755 Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive… vulnerability
- CVE-2026-64792 Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search… vulnerability
- CVE-2026-61836 Directus is a real-time API and App dashboard for managing SQL database content. vulnerability
- CVE-2026-0281 An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to… vulnerability
- CVE-2026-59213 Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. vulnerability
Referenced by CWE · child of (1)
- CWE-525 Use of Web Browser Cache Containing Sensitive Information weakness