A recent vulnerability scan detected a “Elasticsearch Unrestricted Access Information Disclosure” in our Dataminer servers. A quick check revealed that this vulnerability is related to Elasticsearch not restricting access to resources by performing user authentication (https://www.tenable.com/plugins/nessus/101025).

Is there a way we can secure the Elasticsearch instance and have the DMA authenticate when accessing the Elasticsearch instance?

Thanks.