Riskcovery

CVE-2018-10604

State
Published
Severity
Not scored
Published
Jul 24, 2018
Updated
Sep 16, 2024
Reserved
May 1, 2018

Read the record on cve.org

Description

SEL Compass version 3.0.5.1 and prior allows all users full access to the SEL Compass directory, which may allow modification or overwriting of files within the Compass installation folder, resulting in escalation of privilege and/or malicious code execution.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-276 INCORRECT DEFAULT PERMISSIONS CWE-276

Affected Products

ProductVersions
CompassSchweitzer Engineering Laboratories, Inc.
  • 3.0.5.1 and priorAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.