CVE-2023-31416

概要

参考情報

• discuss.elastic.co/t/elastic-cloud-on-kubernetes-eck-2-8-security-update/343854 · Vendor Advisory
• elastic.co/community/security · Not Applicable

elastic cloud on kubernetes のその他の脆弱性

• CVE-2026-78609中 5.4Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via Metadata Spoofing (…
• CVE-2026-78600低 3.5Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privilege Abuse (CAPEC-122). Authentic…
• CVE-2026-72648中 6.5Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes (ECK) can lead to information…
• CVE-2026-72640中 6.5The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it manages, and it accepts th…
• CVE-2020-7010高 7.5Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to…