VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Oct 26, 2023· Updated Jun 17, 2026

CVE-2023-31421

CVE-2023-31421

Description

It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however, certificate signature validation is still performed. More specifically, when the client is configured to connect to an IP address (instead of a hostname) it does not validate the server certificate's IP SAN values against that IP address and certificate validation fails, and therefore the connection is not blocked as expected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Elastic/Apm Server3 versions
    cpe:2.3:a:elastic:apm_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:elastic:apm_server:*:*:*:*:*:*:*:*range: >=8.0.0,<=8.9.2
    • (no CPE)
    • (no CPE)range: 8.0.0, 8.9.2
  • Elastic/Elastic Agent
    cpe:2.3:a:elastic:elastic_agent:*:*:*:*:*:*:*:*
    Range: >=8.0.0,<=8.9.2
  • Elastic/Elastic Beats
    cpe:2.3:a:elastic:elastic_beats:*:*:*:*:*:*:*:*
    Range: >=8.0.0,<=8.9.2
  • Elastic/Elastic Fleet Server
    cpe:2.3:a:elastic:elastic_fleet_server:*:*:*:*:*:*:*:*
    Range: >=8.0.0,<=8.9.2
  • Elastic/Beatsllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 8.0.0, 8.9.2
  • Elastic/Agentllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 8.0.0, 8.9.2
  • Elastic/Fleet Servercpe-rescue
    Range: 8.0.0, 8.9.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.