{"id":"CVE-2018-10604","aliases":["EUVD-2018-2676","GHSA-jm27-chwj-2652"],"status":"published","title":"SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory,...","description":"SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01641,"percentile":0.76529,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2018-07-24T13:00:00Z","modified":"2026-06-17T01:34:15Z","products":[{"vendor":"hcl software","product":"compass"},{"vendor":"schweitzer engineering laboratories, inc.","product":"compass"},{"vendor":"selinc","product":"sel_compass"}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-191-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10604"},{"url":"https://github.com/advisories/GHSA-jm27-chwj-2652"}],"sources":{"cve":[{"id":"CVE-2018-10604","description":"SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.","status":"published","published":"2018-07-24T13:00:00Z","modified":"2024-09-16T22:40:00.252Z","cwes":["CWE-276"],"updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2676","description":"SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.","status":"published","published":"2018-07-24T13:00:00Z","modified":"2024-09-16T22:40:00Z","updated_at":"2026-11-03T00:55:01.173561Z"}],"ghsa":[{"id":"GHSA-jm27-chwj-2652","title":"SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory,...","description":"SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.","status":"published","published":"2022-05-13T01:17:46Z","modified":"2023-02-01T05:05:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:50:13.694184Z"}],"nvd":[{"id":"CVE-2018-10604","description":"SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.","status":"published","published":"2018-07-24T13:29:00.353Z","modified":"2026-06-17T01:34:15.733Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:04:33.865124Z"}]}}