Skip to main content

Pingcentral

1 CVEs product

Monthly

CVE-2022-23726 Sep 30, 15:15 MEDIUM This Month

PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Java Information Disclosure Pingcentral Pingidentity
NVD
CVSS 3.1
4.9
EPSS
0.6%
EPSS 1% CVSS 4.9
MEDIUM This Month

PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Java Information Disclosure Pingcentral +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy