Vulnerability Details CVE-2022-23726
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.0%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2022-23726
-
cpe:2.3:a:pingidentity:pingcentral:*