Cross-Origin Resource Sharing And unauthorized access issues with Elasticsearch

[xinjiahua99]

Describe your problem

I have scanned the server's ports 9380 and 9000 for CORS (Cross-Origin Resource Sharing) vulnerabilities with failed origin checks, as well as unauthorized access issues with Elasticsearch. How can I resolve these security concerns?

[KevinHuSh]

To add password to ES, you need to modify service_conf.yml and rag/util/es_conn.py.