mod_disk_cache stores all client authentication credentials for cached
objects on disk. This means proxy authentication credentials as well as
in certain RFC2616 defined cases standard authentication credentials.

In case of Basic Authentication *plaintext passwords* are stored on disk.

See
http://www.securityfocus.com/archive/1/358099/2004-03-14/2004-03-20/0
for more information and patch.