Petite Pewter Orangutan - TellerV2::setProtocolPausingManager missing access control modifier

[sherlock-admin4]

Petite Pewter Orangutan

High

TellerV2::setProtocolPausingManager missing access control modifier

Summary

TellerV2::setProtocolPausingManager missing access control modifier

Root Cause

No response

Internal pre-conditions

No response

External pre-conditions

No response

Attack Path

No response

Impact

Because it has reinitializer so it can be called again and because it lacks an access control modifier an attacker can set him as _protocolPausingManager

PoC

TellerV2::setProtocolPausingManager

     function setProtocolPausingManager(         
        address _protocolPausingManager
    ) external reinitializer(10) {

         _setProtocolPausingManager(_protocolPausingManager);

    }

Mitigation

Add the correct access control modifier to it.