CVE-2023-31416

Summary

CVE-2023-31416 is a cybersecurity vulnerability affecting Elastic Cloud Kubernetes Service (ECK) versions below 2.8 when used with APM Server versions 8.0 and above. The issue involves a misconfiguration of secret tokens, resulting in anonymous requests being accepted by the APM Server. This vulnerability could potentially lead to unauthorized data ingestion into the affected APM deployment. Organizations using these versions of ECK and APM Server are advised to update ECK to a version 2.8 or later to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.