Comment Re:So this only affects unsecured databases? (Score 1) 54
If you have sensitive data in an elastic search instance, and you can't password protect it, it should _not_ have a public IP. I can't think of a situation where any kind of database should be writable and open to the world without a user / password.
