CVE-2022-23726

Publication date

2022-09-30 14:35:09

Family

Ping Identity

State

PUBLISHED

Description

PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.