Chi tiết CWE-1473

The product uses or supports data in a cache, but it does not properly specify an expiration with a date, time, or time period that is sufficient for the intended security policy of the product or its adminstrators.

Các cách xuất hiện

Implementation

Nền tảng áp dụng

Ngôn ngữ

Lớp: Not Language-Specific (Undetermined)

Kiến trúc

Lớp: Not Architecture-Specific (Undetermined)

Công nghệ

Lớp: Not Technology-Specific (Undetermined)

Hậu quả phổ biến

Ví dụ đã quan sát

Các biện pháp giảm thiểu tiềm năng

Phases : Architecture and Design // Implementation

Ghi chú ánh xạ lỗ hổng

Lý do : This CWE Entry is a Class and might have lower-level children that would be more appropriate
Bình luận : Examine children of this entry to see if there is a better fit

Ghi chú

This entry was created in CWE 5.0 to address known gaps in CWE coverage. It is not as complete as other new entries that were published in recent years. The CWE Team plans to work with the CWE community to make this entry more complete in later 5.x releases.

Tài liệu tham khảo

REF-1579

AWS JVM DNS Guidence
AWS.
https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/java-dg-jvm-ttl.html

REF-1580

Oracle JVM settings descriptions
Oracle.
https://docs.oracle.com/javase/7/docs/technotes/guides/net/properties.html

REF-1581

Don't cache resolved hostnames forever
clintongormley.
https://github.com/elastic/elasticsearch/issues/16412

Gửi