1232
Related Attack Patterns
CAPEC-ID Attack Pattern Name
102 Session Sidejacking
CWE-524: Use of Cache Containing Sensitive Information
Weakness ID : 524
Structure : Simple
Abstraction : Base
Description
The code uses a cache that contains sensitive information, but the cache can be read by an actor
outside of the intended control sphere.
Extended Description
Applications may use caches to improve efficiency when communicating with remote entities or
performing intensive calculations. A cache maintains a pool of objects, threads, connections,
pages, financial data, passwords, or other resources to minimize the time it takes to initialize and
access these resources. If the cache is accessible to unauthorized actors, attackers can read the
cache and obtain this sensitive information.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 668 Exposure of Resource to Wrong Sphere 1469
ParentOf 525 Use of Web Browser Cache Containing Sensitive
Information