이름: Improper Expiration of Cached Data

The product uses or supports data in a cache, but it does not properly specify an expiration with a date, time, or time period that is sufficient for the intended security policy of the product or its adminstrators.

일반 정보

취약점 도입 방식

Implementation

적용 가능한 플랫폼

언어

클래스: Not Language-Specific (Undetermined)

아키텍처

클래스: Not Architecture-Specific (Undetermined)

기술

클래스: Not Technology-Specific (Undetermined)

일반적인 결과

범위	영향	가능성
Access Control Integrity Other	Gain Privileges or Assume Identity, Bypass Protection Mechanism, Unexpected State, Varies by Context

관찰된 예시

참고 자료	설명
[REF-1581]	RESTful search engine caches DNS hostname lookups forever in order to prevent DNS spoofing attacks, but it will not be able to detect when the hostnames resolve to a different IP address.

잠재적 완화 방법

Phases : Architecture and Design // Implementation

취약점 매핑 메모

근거 : This CWE Entry is a Class and might have lower-level children that would be more appropriate
댓글 : Examine children of this entry to see if there is a better fit

메모

This entry was created in CWE 5.0 to address known gaps in CWE coverage. It is not as complete as other new entries that were published in recent years. The CWE Team plans to work with the CWE community to make this entry more complete in later 5.x releases.

참고 자료

REF-1579

AWS JVM DNS Guidence
AWS.
https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/java-dg-jvm-ttl.html

REF-1580

Oracle JVM settings descriptions
Oracle.
https://docs.oracle.com/javase/7/docs/technotes/guides/net/properties.html

REF-1581

Don't cache resolved hostnames forever
clintongormley.
https://github.com/elastic/elasticsearch/issues/16412

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2026-10-25 +00:00	2026-10-28 +00:00	5.0

CWE-1473 상세 정보

CWE-1473