CVE-2013-2027

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:jython_project:jython:2.2.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-02-13 15:59

Updated : 2024-02-04 18:35


NVD link : CVE-2013-2027

Mitre link : CVE-2013-2027

CVE.ORG link : CVE-2013-2027


JSON object : View

Products Affected

jython_project

  • jython

opensuse

  • opensuse
CWE
CWE-264

Permissions, Privileges, and Access Controls