Password is accessible to anyone
Summary
The password is being stored in state through private variable. This private variable can be read by anyone through blockchain state thus is not at all secure.
Vulnerability Details
Impact
High impact as the thing to be accessed by password would be accessible to anyone who reads the password from state.
Tools Used
Foundry
Recommendations
Storing password in platform is not at all a good option as blockchain is public.
Still a possible solution could be storing hashed form of password in blockchain and do the decrypting off-chain through some key such that without that key no one can decrypt the hash. This is a solution but not at all useful as person would have to remember that key.
Lead Judging Commences
finding-anyone-can-read-storage
Private functions and state variables are only visible for the contract they are defined in and not in derived contracts. In this case private doesn't mean secret/confidential
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.