• info
• discussion
• exploit
• solution
• references

Microsoft Outlook Web Access 'no-store' HTTP Directive Information Disclosure Weakness

To exploit this issue, an attacker would need access to the victim's browser cache.