CVE-2022-23726: Infoleak
Published Sep 30, 2022
·Updated
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.
Affected Software
2 affected components
pingidentity Pingcentral>=1.8<1.8.4
pingidentity Pingcentral>=1.9<1.9.3
Event History
Sep 30, 2022
CVE Published
via MITRE·02:35 PM
Data Sourced
via MITRE·02:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-23726.
2
What is the severity of CVE-2022-23726?
The severity of CVE-2022-23726 is medium (4.9).
3
Which PingCentral versions are affected by CVE-2022-23726?
PingCentral versions prior to 1.8.4 and 1.9.3 are affected by CVE-2022-23726.
4
What is the impact of CVE-2022-23726?
CVE-2022-23726 exposes Spring Boot actuator endpoints that, with administrative authentication, return large amounts of sensitive environmental and application information.
5
Where can I find more information about CVE-2022-23726?
You can find more information about CVE-2022-23726 in the PingCentral documentation and PingCentral downloads page.