Lucene search

Ping IdentityCVE-2022-23726

HistorySep 30, 2022 - 3:15 p.m.

CVE-2022-23726

2022-09-3015:15:09

CWE-200

CWE-732

Ping Identity

web.nvd.nist.gov

cve-2022-23726

pingcentral

nvd

information security

sensitive information disclosure

spring boot

CVSS3

5.4

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.

Affected configurations

Nvd

Node

pingidentitypingcentralRange1.8–1.8.4

pingidentitypingcentralRange1.9–1.9.3

VendorProductVersionCPE
pingidentitypingcentral*cpe:2.3:a:pingidentity:pingcentral:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pingidentity	pingcentral	*	cpe:2.3:a:pingidentity:pingcentral::::::::

CNA Affected

[
  {
    "platforms": [
      "java"
    ],
    "product": "PingCentral",
    "vendor": "Ping Identity",
    "versions": [
      {
        "lessThan": "1.10",
        "status": "affected",
        "version": "1.10",
        "versionType": "custom"
      },
      {
        "lessThan": "1.9.3",
        "status": "affected",
        "version": "1.9",
        "versionType": "custom"
      },
      {
        "lessThan": "1.8.4",
        "status": "affected",
        "version": "1.8",
        "versionType": "custom"
      }
    ]
  }
]

References

docs.pingidentity.com/bundle/pingcentral-110/page/sdd1651696160285.html

www.pingidentity.com/en/resources/downloads/pingcentral.html

Social References

CVSS3

5.4

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

Related for CVE-2022-23726