Lucene search
PRIOn knowledge basePRION:CVE-2023-31416HistoryOct 26, 2023 - 7:15 p.m.
Code injection
2023-10-2619:15:00
PRIOn knowledge base
www.prio-n.com
6
code injection
security configuration
eck
apm server
anonymous requests
data ingestion
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apm_server | ge | 8.0 | |
| elastic_cloud_on_kubernetes | lt | 2.8 |
