← voltar
CVE-2022-23726

CVE-2022-23726

CVSS 5.4 MEDIUMEPSS 0.6%CWE-200
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
Ping Identity · PingCentral

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://docs.pingidentity.com/bundle/pingcentral-110/page/sdd1651696160285.htmlhttps://www.pingidentity.com/en/resources/downloads/pingcentral.html