Apache Airflow Caching Disclosure

The vulnerability of Apache Airflow’s software for creating, monitoring, and orchestrating data processing scenarios is related to the disclosure of information through browser caching. Exploiting this vulnerability can allow attackers to disclose sensitive information via the Cache-Control heade...

CVE-2023-4910

A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache...

Input validation

A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens page is rendered from the browser cache...

3Scale Admin Portal API Disclosure

The vulnerability of the 3Scale Admin Portal’s API interfaces relates to the disclosure of information through browser caching. Exploiting this vulnerability could allow an attacker to disclose protected information...

Security Bulletin: IBM Engineering Lifecycle Management is vulnerable to some browser which may store a local cached copy of content received from web servers.(CVE-2021-20551)

Summary Summary guidance: Unless directed otherwise, browsers may store a local cached copy of content received from web servers. Some browsers, including Internet Explorer, cache content accessed via HTTPS. If sensitive information in application responses is stored in the local cache, then this...

Siemens Mendix Information Disclosure Vulnerability

A security vulnerability exists in Siemens Mendix, a low-code application development platform from Siemens, Germany. The vulnerability stems from the fact that applications built with the affected version of Mendix Studio Pro do not prevent the caching of file documents when opening or downloadi...

CVE-2019-19000

ABB eSOMS versions 4.0–6.0.3 are affected by CVE-2019-19000 due to improper configuration of Cache-Control and Pragma HTTP headers in application responses, which can allow browsers/proxies to cache sensitive information. The issue is documented in multiple sources (NVD entry for CVE-2019-19000 a...

CVE-2020-10096

An issue was discovered in Zammad 3.0 through 3.2. It does not prevent caching of confidential data within browser memory. An attacker who either remotely compromises or obtains physical access to a user's workstation can browse the browser cache contents and obtain sensitive information. The...

Security Bulletin: Information Disclosure Security Vulnerability Affects IBM Sterling File Gateway (CVE-2018-1470, CVE-2017-1544, CVE-2017-1575)

Summary Information disclosure security vulnerability affects IBM Sterling Filegateway. Vulnerability Details CVEID: CVE-2018-1470 DESCRIPTION: IBM Sterling File Gateway could allow a remote authenticated attacker to obtain sensitive information displayed in the URL that could lead to further...

CVE-2019-16177

In Limesurvey before 3.17.14, the entire database is exposed through browser caching...

CVE-2019-16177

In Limesurvey before 3.17.14, the entire database is exposed through browser caching...

Design/Logic Flaw

In Limesurvey before 3.17.14, the entire database is exposed through browser caching...

CVE-2019-16177

In Limesurvey before 3.17.14, the entire database is exposed through browser caching...

CVE-2019-16177

In Limesurvey before 3.17.14, the entire database is exposed through browser caching...

CVE-2019-16177

LimeSurvey prior to 3.17.14 exposes the entire database via browser cache. Affected: LimeSurvey before 3.17.14. Root cause: database content is cached and retrievable from the browser. Impact: potential access to complete data set per the cited advisories. Remediation: upgrade to LimeSurvey 3.17....

CVE-2019-16177: Exposure of Sensitive Information to an Unauthorized Actor

In Limesurvey before 3.17.14, the entire database is exposed through browser caching...

PT-2019-14557

Name of the Vulnerable Software and Affected Versions Limesurvey versions prior to 3.17.14 Description The issue exposes the entire database through browser caching. Recommendations For versions prior to 3.17.14, update to version 3.17.14 or later to resolve the issue...

CVE-2018-18640

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching...

CVE-2018-18640

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching...

UBUNTU-CVE-2018-18640

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Information Exposure Through Browser Caching...