Vendor dan Produk

CPE, singkatan dari Common Platform Enumeration, adalah skema standar untuk penamaan perangkat keras, perangkat lunak, dan sistem operasi. CPE menyediakan skema penamaan terstruktur untuk mengidentifikasi dan mengklasifikasikan sistem teknologi informasi, platform, dan paket secara unik berdasarkan atribut tertentu seperti vendor, nama produk, versi, pembaruan, edisi, dan bahasa.

Nama: Improper Expiration of Cached Data

The product uses or supports data in a cache, but it does not properly specify an expiration with a date, time, or time period that is sufficient for the intended security policy of the product or its adminstrators.

Informasi Umum

Mode Pengenalan

Implementation

Platform yang Berlaku

Bahasa

Kelas: Not Language-Specific (Undetermined)

Arsitektur

Kelas: Not Architecture-Specific (Undetermined)

Teknologi

Kelas: Not Technology-Specific (Undetermined)

Konsekuensi Umum

Cakupan	Dampak	Kemungkinan
Access Control Integrity Other	Gain Privileges or Assume Identity, Bypass Protection Mechanism, Unexpected State, Varies by Context

Contoh yang Diamati

Referensi	Deskripsi
[REF-1581]	RESTful search engine caches DNS hostname lookups forever in order to prevent DNS spoofing attacks, but it will not be able to detect when the hostnames resolve to a different IP address.

Mitigasi yang Memungkinkan

Phases : Architecture and Design // Implementation

Catatan Pemetaan Kerentanan

Justifikasi : This CWE Entry is a Class and might have lower-level children that would be more appropriate
Komentar : Examine children of this entry to see if there is a better fit

Catatan

This entry was created in CWE 5.0 to address known gaps in CWE coverage. It is not as complete as other new entries that were published in recent years. The CWE Team plans to work with the CWE community to make this entry more complete in later 5.x releases.

Referensi

REF-1579

AWS JVM DNS Guidence
AWS.
https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/java-dg-jvm-ttl.html

REF-1580

Oracle JVM settings descriptions
Oracle.
https://docs.oracle.com/javase/7/docs/technotes/guides/net/properties.html

REF-1581

Don't cache resolved hostnames forever
clintongormley.
https://github.com/elastic/elasticsearch/issues/16412

Pengajuan

Nama	Organisasi	Tanggal	Tanggal rilis	Version
CWE Content Team	MITRE	2026-10-25 +00:00	2026-10-28 +00:00	5.0

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.

Detail CWE-1473

CWE-1473