Base Score

HIGH7.8

CVE-2013-4251

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.

VectorLOCAL

Published Bysecalert@redhat.com

Published DateNov 04, 2019, 20:15

Affected Versions(1)

scipy(PyPI)

Introduced0

Fixed0.12.1

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
scipy(PyPI)	0	0.12.1	N/A

Weakness Type (CWE):CWE-269

CVSS Metrics

Base Score

7.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120696.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119759.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119771.html
http://www.securityfocus.com/bid/63008
https://access.redhat.com/security/cve/cve-2013-4251
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4251
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4251
https://exchange.xforce.ibmcloud.com/vulnerabilities/88052
https://github.com/scipy/scipy/commit/bd296e0336420b840fcd2faabb97084fd252a973
https://security-tracker.debian.org/tracker/CVE-2013-4251

Base Score

HIGH7.8

Weakness Type (CWE):CWE-269

CVSS Metrics

Base Score

7.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH