Elasticsearch and/or Kibana is currently open without authentication.
This results in all the database data made available publicly.
Severity: high
Fingerprint: 831cb76b8e05df46ea8e2ce2316a515f05c117b205c117b205c117b205c117b2
Indices: 2, document count: 42, size: 44.3 MB Found index .geoip_databases with 41 documents (44.3 MB) Found index read_me with 1 documents (5.4 kB)
Severity: high
Fingerprint: 831cb76b8e05df46ecc43faf802cfa5d855a00dc855a00dc855a00dc855a00dc
Indices: 2, document count: 42, size: 41.5 MB Found index .geoip_databases with 41 documents (41.5 MB) Found index read_me with 1 documents (5.4 kB)
Severity: high
Fingerprint: 831cb76b8e05df46a0a08eb16206f91c31e0fbbfd0387592eba53720842c43dc
Indices: 9, document count: 1053, size: 40.4 MB Found index .geoip_databases with 40 documents (40.2 MB) Found index casa with 0 documents (208 B) Found index test with 1 documents (3.9 kB) Found index log with 1001 documents (145.2 kB) Found index service with 1 documents (20.9 kB) Found index cgi-bin with 1 documents (6.4 kB) Found index minio with 2 documents (12.2 kB) Found index api with 1 documents (4.8 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df466c103d8bea28d785f6a03f47de9d937cde9d937cde9d937c
Indices: 3, document count: 1047, size: 39.7 MB Found index .geoip_databases with 40 documents (39.5 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df46a54ec18b644a7baf0d93804516a05a8616a05a8616a05a86
Indices: 3, document count: 1048, size: 40.8 MB Found index .geoip_databases with 41 documents (40.6 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df465757201198b861be7a5660240a98c9d90a98c9d90a98c9d9
Indices: 3, document count: 1052, size: 44.7 MB Found index .geoip_databases with 45 documents (44.5 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df469bb7cd775df206c5d5418a87809bacbc809bacbc809bacbc
Indices: 3, document count: 1048, size: 80.0 MB Found index .geoip_databases with 41 documents (79.8 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df468e4794160a449c522b24afe00ec15cf50ec15cf50ec15cf5
Indices: 3, document count: 1046, size: 39.5 MB Found index .geoip_databases with 39 documents (39.3 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df46ce9a2cc34f7448c190257dab2af433e02af433e02af433e0
Indices: 3, document count: 1049, size: 45.4 MB Found index .geoip_databases with 42 documents (45.2 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df466ce527119b5651a5d304f0672c61919c2c61919c2c61919c
Indices: 3, document count: 1049, size: 42.5 MB Found index .geoip_databases with 42 documents (42.3 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df465f34271c3065919a9740a8a8d8a9636dd8a9636dd8a9636d
Indices: 3, document count: 1049, size: 46.2 MB Found index .geoip_databases with 42 documents (46.1 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
Severity: high
Fingerprint: 831cb76b8e05df46ef95f3718b6758c76b712b5dec0f562eec0f562eec0f562e
Indices: 3, document count: 1049, size: 43.0 MB Found index .geoip_databases with 42 documents (42.9 MB) Found index log with 1001 documents (145.2 kB) Found index department with 6 documents (16.0 kB)
The following URL (usually /.git/config
) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522fcbdb838
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://github.com/tobias74/elasticsearch-head.git fetch = +refs/heads/master:refs/remotes/origin/master [branch "master"] remote = origin merge = refs/heads/master