CVE-2018-19830

https://notcve.org/view.php?id=CVE-2018-19830

The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public (by default) and does not check the caller's identity. La función UBSexToken() de una implementación del contrato inteligente para Business Alliance Círculo Financiero (BAFC), un token de Ethereum ERC20 comercializable, permite a un atacante cambiar el propietario del contrato, ya que la función es pública (por defecto) y no comprueba la década de las personas que llaman. • https://github.com/SmartContractResearcher/SmartContractSecurity/blob/master/New%20Vulnerabilities%20Allow%20Anyone%20to%20Own%20Certain%20ERC20-Based%20Smart%20Contracts%28CVE-2018-19830%2C%20CVE-2018-19831%2C%20CVE-2018-19832%2C%20CVE-2018-19833%2C%20CVE-2018-19834%29/README.md • CWE-862: Missing Authorization •