Password can be set by anyone.
setPassword function has no restrictions on call, so anyone can set a password...
Add a test like in getPassword function (if msg.sender != s_owner...)
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.