Elastic Fleet Server
1 CVEs
product
Monthly
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Elastic
Information Disclosure
Elastic Beats
Elastic Agent
Apm Server
+1
NVD
CVSS 3.1
7.5
EPSS
0.3%
EPSS 0%
CVSS 7.5
HIGH
This Week
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Elastic
Information Disclosure
Elastic Beats
+3
NVD