CVE-2018-19831

The ToOwner() function of a smart contract implementation for Cryptbond Network (CBN), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2019-12-31

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Cryptbond Network (Cryptbond Network Project)

References

• https://github.com/SmartContractResearcher/SmartContractSecurity/blob/master/New%20Vulnerabilities%20Allow%20Anyone%20t…