First Flight #1: PasswordStore

Summary

a security vulnerability that allows anyone to change the stored password without proper authorization. The contract doesn't check that only the owner can set the password.

Vulnerability Details

An attacker could potentially call the vulnerable "setPassword" function and change the stored password. Here is an example of how this could be exploited:
function exploitSetPassword(string memory newPassword) external {
vulnerableContract.setPassword(newPassword);
}

Impact

Could potentially lead to compromise of very sensitive data due to a password change

Tools Used

Remix IDE

Recommendations

add the " if (msg.sender != s_owner) {
revert PasswordStore__NotOwner();
}" also to the "setPassword" function.