CVE-2022-23726

—

CVSS 3.1

4.9 medium

EPSS

<1%p48

Published

Sep 30, 2022 (Sep 30, 2022)

Modified

Jun 17, 2026

Description

PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.

Vendors: pingidentity
Products: pingcentral
Weakness: CWE-200, CWE-732
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.