CVEvulnerability
CVE-2013-2027
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.
Affected configurations
• opensuse opensuse 13.1
• opensuse opensuse 13.2
• jython project jython 2.2.1
Related
Weakness · not in database (1)
References
- http://advisories.mageia.org/MGASA-2015-0096.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2015-02/msg00055.html Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:158 Broken Link
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html www.oracle.com
- https://bugzilla.redhat.com/show_bug.cgi?id=947949 Issue Tracking
- http://advisories.mageia.org/MGASA-2015-0096.html Third Party Advisory
- http://lists.opensuse.org/opensuse-updates/2015-02/msg00055.html Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:158 Broken Link
- http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html www.oracle.com
- https://bugzilla.redhat.com/show_bug.cgi?id=947949 Issue Tracking