Submission Details
Severity:
Password Change Control
Summary
Any account can call the setPassword function and change the password. This is a major security risk as it allows an unauthorized user to change the password.
Vulnerability Details
Any account can change the password, posing a major security risk.
Impact
Unauthorized users can change the password, potentially leading to unauthorized access.
Tools Used
visual review
Recommendations
Add an onlyOwner modifier to the setPassword function to ensure that only the owner can change the password.
Updates
Lead Judging Commences
inallhonesty
almost 2 years ago
inallhonesty almost 2 years ago
Submission Judgement Published Assigned finding tags:
finding-lacking-access-control
Anyone can call `setPassword` and set a new password contrary to the intended purpose.
Rewards breakdown
nSLOC
20This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.