For each web page, the application should have an appropriate caching policy specifying the extent to which the page and its form fields should be cached.
cwe_Nature: ChildOf cwe_CWE_ID: 524 cwe_View_ID: 1000 cwe_Ordinal: Primary
cwe_Nature: ChildOf cwe_CWE_ID: 524 cwe_View_ID: 699 cwe_Ordinal: Primary
|Confidentiality||Read Application Data||Browsers often store information in a client-side cache, which can leave behind sensitive information for other users to find and exploit, such as passwords or credit card numbers. The locations at most risk include public terminals, such as those in libraries and Internet cafes.|
Protect information stored in cache.
Use a restrictive caching policy for forms and web pages that potentially contain sensitive information.
Do not store unnecessarily sensitive information in the cache.
Consider using encryption in the cache.
|映射的分类名||ImNode ID||Fit||Mapped Node Name|
|OWASP Top Ten 2004||A2||CWE More Specific||Broken Access Control|
|OWASP Top Ten 2004||A3||CWE More Specific||Broken Authentication and Session Management|