CVEvulnerability

CVE-2023-31421

7.5 HIGH Published 2023-10-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-295

Description

It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however, certificate signature validation is still performed. More specifically, when the client is configured to connect to an IP address (instead of a hostname) it does not validate the server certificate's IP SAN values against that IP address and certificate validation fails, and therefore the connection is not blocked as expected.

Affected configurations

• elastic elastic beats (>= 8.0.0 <= 8.9.2) • elastic elastic agent (>= 8.0.0 <= 8.9.2) • elastic apm server (>= 8.0.0 <= 8.9.2) • elastic elastic fleet server (>= 8.0.0 <= 8.9.2)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References