# Vulnerability - HTTP DELETE Method Enabled **URL:** \ **Category:** Elasticsearch\ **Created:** [August 11, 2021, 12:21pm UTC](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057 "2021-08-11T12:21:16Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![sujivisva](https://avatars.discourse-cdn.com/v4/letter/s/b487fb/32.png) [@sujivisva](https://discuss.elastic.co/u/sujivisva)\ **Post date:** [August 11, 2021, 12:21pm UTC](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057/1 "2021-08-11T12:21:16Z")
We are using ElasticSearch software for our application in our Project. But we are getting the following vulnerabilities from the security team HTTP DELETE Method Enabled The Web server contains a flaw that may allow a remote attacker to delete arbitrary files by using the HTTP method 'DELETE', resulting in a loss of integrity. Target Port: 9200/TCP Please help me on fixing this vulnerability. ElasticSearch Version: 7.8.1 ---
**Author:** ![Mark\_Harwood](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_harwood/32/10538_2.png) [@Mark\_Harwood](https://discuss.elastic.co/u/Mark_Harwood)\ **Post date:** [August 11, 2021, 1:21pm UTC](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057/2 "2021-08-11T13:21:41Z")
Delete methods are used to manage a variety of assets in elasticsearch like indices, documents, users, alerts etc. You should enable [elasticsearch security](https://www.elastic.co/guide/en/kibana/current/xpack-security.html) to assign appropriate permissions ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 8, 2021, 1:22pm UTC](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057/3 "2021-09-08T13:22:18Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.