VulnerableCode Advisory Details - GHSA-9347-9w64-q5wp

Staging Environment: Content and features may be unstable or change without notice.

Advisory details: github_osv / GHSA-9347-9w64-q5wp

Essentials
Severities (1)
References (9)
Exploits (0)
EPSS
Severity details (0)
Patches: (0)

Advisory ID	github_osv/GHSA-9347-9w64-q5wp
Aliases	CVE-2013-2027
Summary	Jython Improper Access Restrictions vulnerability Jython before 2.7.2b3 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk
Affected and Fixed Packages	Package Details
Introduced and Fixed Package Commit Patches	Package Commit Patches Details

Weaknesses (1)

CWE-281

Improper Preservation of Permissions

System	Score	Found at
generic_textual	MODERATE

Reference id	Reference type	URL
		http://advisories.mageia.org/MGASA-2015-0096.html
		http://lists.opensuse.org/opensuse-updates/2015-02/msg00055.html
		https://bugzilla.redhat.com/show_bug.cgi?id=947949
		https://github.com/jython/frozen-mirror/blob/b8d7aa4cee50c0c0fe2f4b235dd62922dd0f3f99/NEWS#L25C8-L25C15
		https://github.com/jython/frozen-mirror/commit/053949e66d307168fd70b39725f4d3e6b642acc1
		http://www.mandriva.com/security/advisories?name=MDVSA-2015:158
		http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
		jython/frozen-mirror
CVE-2013-2027		https://nvd.nist.gov/vuln/detail/CVE-2013-2027

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.