First published: Mon Jul 09 2018(Updated: )
The mintToken function of a smart contract implementation for aman, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Array-tools |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-13515 has a high severity due to the potential for unauthorized balance manipulation.
To fix CVE-2018-13515, ensure proper integer checks are implemented in the mintToken function to prevent overflow.
CVE-2018-13515 affects users of the aman Ethereum token smart contract.
The impact of CVE-2018-13515 includes the risk of the contract owner manipulating user balances, undermining the integrity of the token.
CVE-2018-13515 remains exploitable if the vulnerable smart contract has not been updated to fix the integer overflow.