medium5.3
CVE-2023-31416
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0.
Impact
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Elastic Cloud On Kubernetes | before 2.8 |