Detections
Analytics

Elasticsearch Unrestricted Access Information Disclosure

medium Nessus Plugin ID 101025

Language:

Synopsis

The search engine running on the remote web server is affected by an information disclosure vulnerability.

Description

The Elasticsearch application running on the remote web server is affected by an information disclosure vulnerability due to a failure to restrict resources via authentication. An unauthenticated, remote attacker can exploit this to disclose sensitive information from the database.

Solution

Enable native user authentication or integrate with an external user management system such as LDAP and Active Directory.

See Also

http://www.nessus.org/u?d055e692

http://www.nessus.org/u?b80612a1

Plugin Details

Severity: Medium

ID: 101025

File Name: elasticsearch_unprotected.nasl

Version: Revision: 1.2

Type: remote

Family: CGI abuses

Published: 6/23/2017

Updated: 6/27/2017

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:elasticsearch:elasticsearch

Required KB Items: installed_sw/Elasticsearch

Vulnerability Publication Date: 6/1/2017