DUX: ElasticSearch Authentication not enabled
book
Article ID: 137009
calendar_today
Updated On:
Products
CA Automic Dollar Universe
Issue/Introduction
Database "ElasticSearch" embedded with DU Explorer allows requests without any authentication.
Environment
Release : All versions < 7.0.01
Component : DOLLAR UNIVERSE Explorer
Cause
Dollar Universe Explorer uses an old version of ElasticSearch which does not allow to block the acess to unauthenticated users to its HTTP interface.
Resolution
Workaround: Block the 9300 HTTP using a firewall to forbid requests coming from remote servers.
Solution: Upgrade to Dollar Universe Explorer 7 which should be available in 2021.
Feedback
thumb_up
Yes
thumb_down
No