CVE-2018-12079

{"id": "CVE-2018-12079", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-06-25T11:29:00.590", "references": [{"url": "https://peckshield.com/2018/06/11/tradeTrap/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://peckshield.com/2018/06/11/tradeTrap/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The mintToken function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, has no period constraint, which allows the owner to increase the total supply of the digital assets arbitrarily so as to make profits, aka the \"tradeTrap\" issue."}, {"lang": "es", "value": "La funci\u00f3n mintToken de una implementaci\u00f3n de contrato inteligente para Substratum (SUB), un token de Ethereum ERC20 intercambiable, no tiene l\u00edmites de periodo, lo que permite que el propietario incremente el suministro total de activos digitales de forma arbitraria para obtener beneficios. Esto tambi\u00e9n se conoce como problema \"tradeTrap\"."}], "lastModified": "2024-11-21T03:44:32.790", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:substratum:substratum:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F727DB5-E50E-4CCC-93DF-4BBFE0891FF0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}