RULE(RULE ID:336804)

Rule General Information
Release Date: 2022-07-12
Rule Name: Elasticsearch Unauthorized Access Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Elasticsearch is an open-source distributed search and analysis engine developed in Java for fast search, analysis, and visualization of large-scale data. Elasticsearch has an unauthorized access vulnerability on the default port 9200. Remote attackers can exploit this vulnerability to bypass access restrictions and illegally manipulate data.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.