# Vulnerability ESA-2019-04

**URL:** <https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670>\
**Category:** Elasticsearch\
**Created:** [December 20, 2022, 3:55pm UTC](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670 "2022-12-20T15:55:58Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![test\_qweqwe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/test_qweqwe/32/94750_2.png) [@test\_qweqwe](https://discuss.elastic.co/u/test_qweqwe)\
**Post date:** [December 20, 2022, 3:55pm UTC](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670/1 "2022-12-20T15:55:58Z")

</div>

Hi,

I have this vulnerability

> **[Elasticsearch ESA-2019-04](https://www.tenable.com/plugins/nessus/122973)**
>
> The remote web server hosts a Java application that is vulnerable. (Nessus Plugin ID 122973)

But we don't have xpack-security installed.  
Does it apply to me?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 20, 2022, 10:00pm UTC](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670/2 "2022-12-20T22:00:51Z")

</div>

What version of Elasticsearch are you using? That applies to a super old version.

---

<div class="post-metadata">

**Author:** ![test\_qweqwe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/test_qweqwe/32/94750_2.png) [@test\_qweqwe](https://discuss.elastic.co/u/test_qweqwe)\
**Post date:** [December 21, 2022, 8:07am UTC](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670/3 "2022-12-21T08:07:17Z")

</div>

We are using 5.2.2

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 21, 2022, 8:27am UTC](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670/4 "2022-12-21T08:27:42Z")

</div>

Do you have any other security plugin enabled? If not, the entire cluster is open and you do not need to exploit any security vulnerabilities to get access to the cluster.

Also note that the version you are using is very, very old and has been EOL for many years. You should really look to upgrade and enable security.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 21, 2022, 7:56pm UTC](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670/5 "2022-12-21T19:56:44Z")

</div>

5.x is very much [EOL](https://www.elastic.co/support/eol) and the only option here is to upgrade.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 18, 2023, 7:57pm UTC](https://discuss.elastic.co/t/vulnerability-esa-2019-04/321670/6 "2023-01-18T19:57:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.