The application uses a cache to maintain a pool of objects, threads, connections, pages, or passwords to minimize the time it takes to access them or the resources to which they connect. If implemented improperly, these caches can allow access to unauthorized information or cause a denial of service vulnerability.
Time of Introduction
Implementation
Common Consequences
Scope
Effect
Confidentiality
Technical Impact: Read application
data
Potential Mitigations
Phase: Architecture and Design
Protect information stored in cache.
Phase: Architecture and Design
Do not store unnecessarily sensitive information in the cache.
Description
