← back
CVE-2022-23726

CVE-2022-23726

CVSS 5.4 MEDIUMEPSS 0.6%CWE-200
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected products
Ping Identity · PingCentral

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://docs.pingidentity.com/bundle/pingcentral-110/page/sdd1651696160285.htmlhttps://www.pingidentity.com/en/resources/downloads/pingcentral.html