VULNERABILITY INTELLIGENCE

CVE-2018-10604

CVSS score8.8 HIGH

EPSS probability1.64%

CISA KEVNot currently listed

Published2018-07-24

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.

Weakness classification

CWE-276: Incorrect Default Permissions

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource