Information Disclosure Vulnerability in Microsoft Outlook Web Access

CVE-2008-2143

Summary

An information disclosure vulnerability exists in Microsoft Outlook Web Access due to the use of the Cache-Control: no-cache HTTP directive instead of the no-store directive. This issue can lead to web browsers caching sensitive user information, which may be accessible by unauthorized parties. Attackers exploiting this vulnerability could potentially view stored sensitive data that should be protected from caching, thus posing a privacy risk to users.

References