documentation_complete: true

title: 'Disable Cache Support'

description: |-
    The <tt>cache</tt> module allows <tt>httpd</tt> to cache data, optimizing access to
    frequently accessed content. However, it introduces potential security flaws
    such as the possibility of circumventing <tt>Allow</tt> and
    <tt>Deny</tt> directives.
    <br /><br /> If this functionality is
    unnecessary, comment out the module:
    <pre>#LoadModule cache_module modules/mod_cache.so</pre>
    If caching is required, it should not be enabled for any limited-access content.

rationale: |-
    Minimizing the number of loadable modules available to the web server reduces risk
    by limiting the capabilities allowed by the web server.

severity: unknown

identifiers:
    cce: 26859-9
