Read the docs
Red Hat Security Advisory

RHSA-2012:1206

python-paste-script security update

Released 2012-08-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 30

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.04027 Published 2012-05-01 Fixed in 2.0.1, 1.7.5.1 CWE-264