GitHub Advisoryadvisory · Maven

GHSA-9347-9w64-q5wp Jython Improper Access Restrictions vulnerability

MEDIUM Published 2022-05-14 Modified 2023-08-17 Official page ↗
Aliases
CVE-2013-2027
Ecosystem
Maven
Packages
org.python:jython-standalone
Severity
Moderate
Weaknesses
CWE-281
Reviewed
2023-08-17

Affected packages

• Maven org.python:jython-standalone: < 2.7.2b3 → fixed in 2.7.2b3

Description

Jython before 2.7.2b3 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2013-2027 Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access… vulnerability

Weakness · CWE (1)

  • CWE-281 Improper Preservation of Permissions weakness

References