https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:33:28 +0000 https://cve.radiocsirt.org/vuln/cve-2023-31421 <p><strong>Affected:</strong> Elastic Beats, Elastic Agent, Elastic APM Server, Elastic Fleet Server</p> <p>It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however, certificate signature validation is still performed. More specifically, when the client is configured to connect to an IP address (instead of a hostname) it does not validate the server certificate&#39;s IP SAN values against that IP address and certificate validation fails, and therefore the connection is not blocked as expected.</p> <p><strong>Affected:</strong> Elastic Beats, Elastic Agent, Elastic APM Server, Elastic Fleet Server</p> <p>It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however, certificate signature validation is still performed. More specifically, when the client is configured to connect to an IP address (instead of a hostname) it does not validate the server certificate&#39;s IP SAN values against that IP address and certificate validation fails, and therefore the connection is not blocked as expected.</p> https://cve.radiocsirt.org/vuln/cve-2023-31421