Security issues of Elasticsearch v1.1.1 used in Ta...
Security issues of Elasticsearch v1.1.1 used in Talend Log Server
Elasticsearch version 1.1.1 used in Talend Log Server has a security vulnerability issue, and this article proposes a solution to this issue that impacts Talend products versions 5.4.x to 5.6.1. For more information on this issue, please read this page on the Elastic official website.
This article only applies to Talend products version between 5.4.x to 5.6.1.
If you are running a Talend product with a version between 5.4.x and 5.6.1, and you have the Talend Log Server installed, you need to the following configuration changes to properly secure your system:
Create a file called elasticsearch.yml in your Talend Log Server installation directory (/Talend/<version>/<Talend_logServer_dir>).
Edit the file and add the following lines to disable dynamic scripting: