lmenezes / elasticsearch-kopf

web admin interface for elasticsearch
MIT License
2.41k stars 333 forks source link

unprtected backend config page #409

Open famanx opened 3 years ago

famanx commented 3 years ago

Hi guys,

by chance I visited http://fairgleich.de/#!/nodes a few min ago and it seems that it is publicly accessible, without authentication - I assume this is unintended. I'm presented with a list of elasticsearch nodes which I could shut down, telling by the dropdown menu...

Cheers, famanx