Описание
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
Ссылки
- Vendor Advisory
- Not Applicable
- Vendor Advisory
- Not Applicable
Уязвимые конфигурации
Конфигурация 1Версия до 2.8 (исключая)Версия от 8.0.0 (включая)
Одновременно
cpe:2.3:a:elastic:elastic_cloud_on_kubernetes:*:*:*:*:*:*:*:*
cpe:2.3:a:elastic:apm_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 41%
0.00195
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-200
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 5.3
github
больше 2 лет назад
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
EPSS
Процентиль: 41%
0.00195
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-200
NVD-CWE-noinfo