Jetpack <= 3.7.1 - Information disclosure
2015-10-01 00:00
Jaime Delgado HornaStrategic Overview
StatusPatched in 3.7.2
Affected PluginJetpack – WP Security, Backup, Speed, & Growth
Affected Version
<= 3.7.1CVSS5.3Medium
CVE
N/AVulnerability Overview
Jetpack up to 3.7.1 is affected by an information disclosure vulnerability.
Technical Analysis
REMEDIATION: Update to version 3.7.2, or a newer patched version --- IDENTIFIER: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C