Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-19830

Опубликовано: 31 дек. 2019
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public (by default) and does not check the caller's identity.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:business_alliance_financial_circle_project:business_alliance_financial_circle:-:*:*:*:*:*:*:*

EPSS

Процентиль: 42%
0.00198
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-862

Связанные уязвимости

github
больше 3 лет назад

The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public (by default) and does not check the caller's identity.

EPSS

Процентиль: 42%
0.00198
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-862