[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8Iy03ndlmFXAdF2T1hFCHt1fKGvp6znpk1EEvCdD9AY":3,"g5a-risk:CVE-2023-31421":136},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":26,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":55,"references":56,"referencesCount":65,"weaknesses":66,"weaknessesCount":75,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":131,"notableEvents":132},"CVE-2023-31421","What is CVE-2023-31421?","It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however, certificate signature validation is still performed. More specifically, when the client is configured to connect to an IP address (instead of a hostname) it does not validate the server certificate's IP SAN values against that IP address and certificate validation fails, and therefore the connection is not blocked as expected.","It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid ...","2023-10-26T04:15:16","2024-02-15T19:39:22.41",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"bressers@elastic.co","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",5.9,"MEDIUM",2.2,0.00323,[37,37,37,37,37,37,37],"High",[41,46,49,52],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"elastic","elastic_beats","*","cpe:2.3:a:elastic:elastic_beats:*:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":44,"criteria":48,"vulnerable":4},"elastic_agent","cpe:2.3:a:elastic:elastic_agent:*:*:*:*:*:*:*:*",{"vendor":42,"product":50,"version":44,"criteria":51,"vulnerable":4},"apm_server","cpe:2.3:a:elastic:apm_server:*:*:*:*:*:*:*:*",{"vendor":42,"product":53,"version":44,"criteria":54,"vulnerable":4},"elastic_fleet_server","cpe:2.3:a:elastic:elastic_fleet_server:*:*:*:*:*:*:*:*",4,[57,62],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fdiscuss.elastic.co\u002Ft\u002Fbeats-elastic-agent-apm-server-and-fleet-server-8-10-1-security-update-improper-certificate-validation-issue-esa-2023-16\u002F343385","Elastic",[61],"Vendor Advisory",{"url":63,"source":59,"tags":64},"https:\u002F\u002Fwww.elastic.co\u002Fcommunity\u002Fsecurity",[61],2,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2023-31421? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-31421, a high severity cyber security vulnerability from 2023. It was discovered that when acting as TLS clients, Beats, E...","CVE-2023-31421, CVE-2023-31421 vulnerability, CVE-2023-31421 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, elastic security, elastic_beats vulnerability, elastic_agent vulnerability, apm_server vulnerability, elastic_fleet_server vulnerability","\u002Fwhat-is\u002Fcve-2023-31421",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-31421","Cybersecurity","CVE-2023-31421, CVE-2023-31421 vulnerability, CVE-2023-31421 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104,113,119,125],{"Operator":26,"Negate":26,"Nodes":105},[106],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":26,"VersionEndIncluding":112},"F350E05B-DF03-4D1F-95A4-4F6C14DD1640","8.0.0","8.9.2",{"Operator":26,"Negate":26,"Nodes":114},[115],{"Operator":107,"Negate":26,"CPEMatch":116},[117],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":26,"VersionEndIncluding":112},"9CB5A9F5-BEFA-472C-A29B-4E71F2B19609",{"Operator":26,"Negate":26,"Nodes":120},[121],{"Operator":107,"Negate":26,"CPEMatch":122},[123],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":26,"VersionEndIncluding":112},"8E6E46E9-87C4-4422-AB28-811252254A88",{"Operator":26,"Negate":26,"Nodes":126},[127],{"Operator":107,"Negate":26,"CPEMatch":128},[129],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":26,"VersionEndIncluding":112},"F77F3ECE-C5B8-4BBB-B1B5-986DBCA2C0EE",[],[],{"lastModified":11,"cacheTime":134,"version":135},1792260435820,"2.0",{"score":137,"band":138,"action":139,"scoredAt":140},47,"Medium","Plan remediation","2026-10-16T06:59:33.695485+00:00"]