← Back

Elastic Cloud On Kubernetes

elastic_cloud_on_kubernetes

Vendor: Elastic • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-31416
1Elastic
1Elastic Cloud On Kubernetes
Jun 17, 2026
Oct 26, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
CVE-2020-7010
1Elastic
1Elastic Cloud On Kubernetes
Jun 17, 2026
Jun 3, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to determine when the current Elastic Stack cluster was deployed they may be able...Show more
Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. If an attacker is able to determine when the current Elastic Stack cluster was deployed they may be able to more easily brute force the Elasticsearch credentials generated by ECK.Show less