PT-2023-23309 · Elastic · Apm Server+1

Ismisepaul · Published 2023-10-26 · Updated 2024-07-25 · CVE-2023-31416

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ECK versions prior to 2.8 APM Server versions 8.0 and later

Description The secret token configuration is not applied when using ECK with a version less than 2.8 alongside an APM Server version 8.0 or greater. This could lead to anonymous requests being accepted by the APM Server and the data being ingested into the APM deployment.

Recommendations For ECK versions prior to 2.8, update to version 2.8 or later to ensure the secret token configuration is applied correctly. For APM Server versions 8.0 and later, consider restricting access to the APM Server until the ECK version is updated to 2.8 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-31416

Affected Products

Apm Server

Eck

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-31416 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31416 · Vendor Advisory
• https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-eck-2-8-security-update/343854 · Vendor Advisory
• https://t.me/cibsecurity/73001 · Telegram Post
• https://twitter.com/CVEnew/status/1717620377461871038 · Twitter Post
• https://elastic.co/community/security · Note
• https://twitter.com/VulmonFeeds/status/1717637979106119802 · Twitter Post