The application uses a cache to maintain a pool of objects,
threads, connections, pages, or passwords to minimize the time it takes to
access them or the resources to which they connect. If implemented improperly,
these caches can allow access to unauthorized information or cause a denial of
service vulnerability.
Time of Introduction
Implementation
Potential Mitigations
Phase
Description
Protect information stored in cache.
Do not store unnecessarily sensitive information in the cache.