PT-2023-23309 · Elastic · Apm Server+1

Ismisepaul · Publicado 2023-10-26 · Atualizado 2024-07-25 · CVE-2023-31416

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ECK versions prior to 2.8 APM Server versions 8.0 and later

Description The secret token configuration is not applied when using ECK with a version less than 2.8 alongside an APM Server version 8.0 or greater. This could lead to anonymous requests being accepted by the APM Server and the data being ingested into the APM deployment.

Recommendations For ECK versions prior to 2.8, update to version 2.8 or later to ensure the secret token configuration is applied correctly. For APM Server versions 8.0 and later, consider restricting access to the APM Server until the ECK version is updated to 2.8 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-31416

Produtos afetados

Apm Server

Eck

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-31416 · Nota de Segurança
• https://t.me/cibsecurity/73001 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-31416 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1717620377461871038 · Publicação no Twitter
• https://elastic.co/community/security · Nota
• https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-eck-2-8-security-update/343854 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1717637979106119802 · Publicação no Twitter