Description
PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amounts of sensitive environmental and application information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ping Identity | PingCentral | 1.10 – < 1.10, 1.9 – < 1.9.3, 1.8 – < 1.8.4 | 1.10 |