CVE-2013-2027

medium

Description

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

References

Advisories
More

http://lists.opensuse.org/opensuse-updates/2015-02/msg00055.html

http://advisories.mageia.org/MGASA-2015-0096.html

https://github.com/advisories/GHSA-9347-9w64-q5wp

https://github.com/shadawck/mitrecve

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-3281

https://bugzilla.redhat.com/show_bug.cgi?id=947949

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

http://www.mandriva.com/security/advisories?name=MDVSA-2015:158

Details

Source: Mitre, NVD

Published: 2015-02-13

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 5.9

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L