CVE-2023-31416 (published 2023-10-26T18:46:21.531Z)
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
Affected products: Vendor: Elastic
Product: Elastic Cloud on Kubernetes
Versions: <2.8