CWE-524 - Use of Cache Containing Sensitive Information

Description

The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.

Latest vulnerabilities for CWE-524

Information disclosure in Fortra BoKS Server Agent 2025-06-19
Low Yes
Multiple vulnerabilities in Moodle 2025-06-18
High Yes
Multiple vulnerabilities in cPanel 2024-10-17
Medium Yes
Multiple vulnerabilities in Moodle 2024-08-20
High Yes Public exploit
Multiple vulnerability in Siemens SINEC Traffic Analyzer 2024-08-14
Medium Yes
Multiple vulnerabilities in Events 2 extension for TYPO3 2024-06-28
Medium Yes
Session cookie disclosure in Shopware 2024-03-08
High Yes

References

Description of CWE-524 on Mitre website