Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-31416

Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.

Published

2023-10-26T19:15:45.270

Last Modified

2024-11-21T08:01:49.107

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application elastic elastic_cloud_on_kubernetes < 2.8 Yes
Application elastic apm_server ≥ 8.0.0 No
References