Vulnerability CVE-2023-31416
Published: 2023-10-26

Description:
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.

 References:
https://www.elastic.co/community/security
https://discuss.elastic.co/t/elastic-cloud-on-kubernetes-eck-2-8-security-update/343854
Copyright 2026, cxsecurity.com

 

Back to Top