9.8
CVE-2018-17111
- EPSS 0.43%
- Veröffentlicht 18.09.2018 21:29:03
- Zuletzt bearbeitet 21.11.2024 03:53:54
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use this onlyOwner modifier, because the comparison between msg.sender and owner is incorrect.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Coinlancer ≫ Coinlancer Version-
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.43% | 0.599 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|