Unrated severityNVD Advisory· Published Oct 26, 2023· Updated Sep 9, 2024

Elastic Cloud on Kubernetes (ECK) secret token configuration issue

CVE-2023-31416

Description

Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Elastic/ECKllm-create
Range: <2.8
Elastic/Apm Serverllm-fuzzy
Range: >=8.0
Elastic/Elastic Cloud on Kubernetescpe-rescue
Range: <2.8

Patches

Vulnerability mechanics

References

discuss.elastic.co/t/elastic-cloud-on-kubernetes-eck-2-8-security-update/343854mitre
www.elastic.co/community/securitymitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000