CVE-2023-31421

🗓️ 26 Oct 2023 04:15:16Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

Insecure TLS client certificate validation

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	Vulnerabilities include agents for data collection and delivery in Elasticsearch or Logstash Elastic Beats, agents for collecting metrics in Elastic Agent, server software for monitoring and analyzing application performance in Elastic APM Server, server software for managing agents in Elastic Fleet Server. Issues also involve errors in the TLS certificate validation process, allowing attackers to establish connections with invalid server certificates.	23 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-31421	26 Oct 202307:44	–	circl
CNNVD	Elasticsearch Security Vulnerabilities	26 Oct 202300:00	–	cnnvd
CVE	CVE-2023-31421	26 Oct 202303:10	–	cve
Cvelist	CVE-2023-31421 Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue	26 Oct 202303:10	–	cvelist
Elastic	Beats, Elastic Agent, APM Server, and Fleet Server 8.10.1 Security Update - Improper Certificate Validation issue (ESA-2023-16)	19 Sep 202315:32	–	elastic
EUVD	EUVD-2023-35729	3 Oct 202520:07	–	euvd
Prion	Code injection	26 Oct 202304:15	–	prion
Positive Technologies	PT-2023-7073 · Elastic · Apm Server +3	25 Oct 202300:00	–	ptsecurity

NVD

Node

elastic elastic_beatsRange8.0.0–8.9.2

Node

elastic elastic_agentRange8.0.0–8.9.2

Node

elastic apm_serverRange8.0.0–8.9.2

Node

elastic elastic_fleet_serverRange8.0.0–8.9.2

Source	Link
discuss	www.discuss.elastic.co/t/beats-elastic-agent-apm-server-and-fleet-server-8-10-1-security-update-improper-certificate-validation-issue-esa-2023-16/343385
elastic	www.elastic.co/community/security

17 Jun 2026 05:56Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.9 - 7.5

EPSS0.0027

beats elastic agent apm server fleet server ip address certificate validation connection