Launchpad.net

CVE 2013-2027

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors.

See the CVE page on Mitre.org for more details.