← Database

CVE-2022-23726

MEDIUM CVSS: 5.4 Published: 2022-09-30 Modified: 2026-06-17

Description

PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.

Affected Platforms

Pingidentity Pingcentral

Weakness Type

CWE-200, CWE-732

References