Security Advisory

CVE-2018-17111

9.8
CRITICAL

Vulnerability Description

The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use this onlyOwner modifier, because the comparison between msg.sender and owner is incorrect.
Published Date September 18, 2018
Official Source NIST NVD Advisory