Elasticsearch and/or Kibana is currently open without authentication.
This results in all the database data made available publicly.
Severity: high
Fingerprint: 831cb76b8e05df4637d06541a27ad47fa27ad47fa27ad47fa27ad47fa27ad47f
Indices: 1, document count: 1, size: 4.0 kB Found index read-me with 1 documents (4.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df46cae9690c22b984c722b984c722b984c722b984c722b984c7
Indices: 1, document count: 1, size: 4.3 kB Found index read-me with 1 documents (4.3 kB)
Severity: medium
Fingerprint: 831cb76b8e05df46f0637d34cef5982acef5982acef5982acef5982acef5982a
Indices: 1, document count: 0, size: 283 B Found index casa with 0 documents (283 B)
Severity: high
Fingerprint: 831cb76b8e05df467f2377f7faed4aeafaed4aeafaed4aeafaed4aeafaed4aea
Indices: 1, document count: 1418, size: 1.2 MB Found index haystack with 1418 documents (1.2 MB)
Open service 51.250.89.113:443
2024-05-31 11:46
HTTP/1.1 403 Forbidden Audit-Id: 161ebd0d-6451-4f83-aaad-88e98e1935c6 Cache-Control: no-cache, private Content-Type: application/json X-Content-Type-Options: nosniff X-Kubernetes-Pf-Flowschema-Uid: de215bad-611a-4027-a32c-f04a3e884448 X-Kubernetes-Pf-Prioritylevel-Uid: c2b10662-fb1c-41f6-9476-9d9b8a9517a7 Date: Fri, 31 May 2024 11:46:54 GMT Content-Length: 217 Connection: close { "kind": "Status", "apiVersion": "v1", "metadata": {}, "status": "Failure", "message": "forbidden: User \"system:anonymous\" cannot get path \"/\"", "reason": "Forbidden", "details": {}, "code": 403 }
Open service 51.250.89.113:443
2024-05-25 06:02
HTTP/1.1 403 Forbidden Audit-Id: 5dc3dd7e-cf7c-4b1d-87ba-ff7a9bc85849 Cache-Control: no-cache, private Content-Type: application/json X-Content-Type-Options: nosniff X-Kubernetes-Pf-Flowschema-Uid: de215bad-611a-4027-a32c-f04a3e884448 X-Kubernetes-Pf-Prioritylevel-Uid: c2b10662-fb1c-41f6-9476-9d9b8a9517a7 Date: Sat, 25 May 2024 06:02:28 GMT Content-Length: 217 Connection: close { "kind": "Status", "apiVersion": "v1", "metadata": {}, "status": "Failure", "message": "forbidden: User \"system:anonymous\" cannot get path \"/\"", "reason": "Forbidden", "details": {}, "code": 403 }