CVE-2013-2027

CVE-2013-2027 affects Jython 2.2.1, where class cache files are created with permissions from the current umask, allowing local attackers to bypass access restrictions. The IBM advisory notes potential arbitrary code execution or information disclosure and recommends upgrading to jython-standalon...