diff --git a/typo3/sysext/core/Classes/Middleware/BackendUserAuthenticator.php b/typo3/sysext/core/Classes/Middleware/BackendUserAuthenticator.php
index 4b5ed7f26f850b5a7af18576d4714da8673ea4a6..ac90a8e15a78638dc4cc61056a43026f6a3a51dc 100644
--- a/typo3/sysext/core/Classes/Middleware/BackendUserAuthenticator.php
+++ b/typo3/sysext/core/Classes/Middleware/BackendUserAuthenticator.php
@@ -76,7 +76,7 @@ abstract class BackendUserAuthenticator implements MiddlewareInterface
         $headers = [
             'Expires' => 0,
             'Last-Modified' => gmdate('D, d M Y H:i:s') . ' GMT',
-            'Cache-Control' => 'no-cache, must-revalidate',
+            'Cache-Control' => 'no-cache, no-store',
             // HTTP 1.0 compatibility, see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Pragma
             'Pragma' => 'no-cache',
         ];
diff --git a/typo3/sysext/filelist/Classes/Controller/FileDownloadController.php b/typo3/sysext/filelist/Classes/Controller/FileDownloadController.php
index c8aec53b62a6fea5528157f35fe843a53e63c6b3..1fc1542a5988d3da7e4da9ccc58e4f8fbe4de377 100644
--- a/typo3/sysext/filelist/Classes/Controller/FileDownloadController.php
+++ b/typo3/sysext/filelist/Classes/Controller/FileDownloadController.php
@@ -116,7 +116,7 @@ class FileDownloadController
             ->withHeader('Content-Disposition', 'attachment; filename=' . $downloadFileName)
             ->withHeader('Content-Transfer-Encoding', 'binary')
             ->withHeader('Pragma', 'no-cache')
-            ->withHeader('Cache-Control', 'public, must-revalidate')
+            ->withHeader('Cache-Control', 'no-cache, no-store')
             ->withBody($this->streamFactory->createStreamFromFile($temporaryFileName));
     }
 
diff --git a/typo3/sysext/frontend/Tests/Functional/Middleware/BackendUserAuthenticatorTest.php b/typo3/sysext/frontend/Tests/Functional/Middleware/BackendUserAuthenticatorTest.php
index 3aefe379563f9c0d74886de14ec92b14646bab0c..8272a0fa26435e03022016fa1a14c40eaf6e5241 100644
--- a/typo3/sysext/frontend/Tests/Functional/Middleware/BackendUserAuthenticatorTest.php
+++ b/typo3/sysext/frontend/Tests/Functional/Middleware/BackendUserAuthenticatorTest.php
@@ -64,7 +64,7 @@ class BackendUserAuthenticatorTest extends FunctionalTestCase
             (new InternalRequest())->withPageId(1),
             (new InternalRequestContext())->withBackendUserId(1)
         );
-        self::assertEquals('no-cache, must-revalidate', $response->getHeaders()['Cache-Control'][0]);
+        self::assertEquals('no-cache, no-store', $response->getHeaders()['Cache-Control'][0]);
         self::assertEquals('no-cache', $response->getHeaders()['Pragma'][0]);
         self::assertEquals(0, $response->getHeaders()['Expires'][0]);
     }
diff --git a/typo3/sysext/install/Classes/Controller/InstallerController.php b/typo3/sysext/install/Classes/Controller/InstallerController.php
index af244b901881d632f6d12b75a9093d4d6a7c5cc1..761c1e5a0690377014671fd82d58c69e5d33592e 100644
--- a/typo3/sysext/install/Classes/Controller/InstallerController.php
+++ b/typo3/sysext/install/Classes/Controller/InstallerController.php
@@ -166,7 +166,7 @@ class InstallerController
             $view->render(),
             200,
             [
-                'Cache-Control' => 'no-cache, must-revalidate',
+                'Cache-Control' => 'no-cache, no-store',
                 'Pragma' => 'no-cache',
             ]
         );
diff --git a/typo3/sysext/install/Classes/Controller/LayoutController.php b/typo3/sysext/install/Classes/Controller/LayoutController.php
index 6d179ec8554a5a73fe3d892e6a5eb91901c544a0..b735d55b0a45a6c0aa6251e694adb42ca07f9fb5 100644
--- a/typo3/sysext/install/Classes/Controller/LayoutController.php
+++ b/typo3/sysext/install/Classes/Controller/LayoutController.php
@@ -79,7 +79,7 @@ class LayoutController extends AbstractController
             $view->render(),
             200,
             [
-                'Cache-Control' => 'no-cache, must-revalidate',
+                'Cache-Control' => 'no-cache, no-store',
                 'Pragma' => 'no-cache',
             ]
         );