DUX: ElasticSearch Authentication not enabled

Products

• CA Automic Dollar Universe

Issue/Introduction

Database "ElasticSearch" embedded with DU Explorer allows requests without any authentication.

Environment

Release : All versions < 7.0.01

Component : DOLLAR UNIVERSE Explorer 

Cause

Dollar Universe Explorer uses an old version of ElasticSearch which does not allow to block the acess to unauthenticated users to its HTTP interface.

Resolution

Workaround: Block the 9300 HTTP using a firewall to forbid requests coming from remote servers.

Solution: Upgrade to Dollar Universe Explorer 7 which should be available in 2021.