CVE Daily

CVE-2018-19834

The quaker function of a smart contract implementation for BOMBBA (BOMB), an tra...

High CVSS 7.5

Overview

The quaker function of a smart contract implementation for BOMBBA (BOMB), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.

CWE: CWE-287 Published: 2019-12-31T16:15:11.493
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags