NetSight
IP …
medium4.6

CVE-2013-2027

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspeci…

Impact

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

Affected products

VendorProductAffected versions
OpensuseOpensuse
Versions 13.1, 13.2
Jython ProjectJython
Version 2.2.1

Weakness classification

CWE-264

References