CVE-2019-6121 - An issue was discovered in NiceHash Miner before 2.0.3.0

Back Back to CVE browser

LOW

An issue was discovered in NiceHash Miner before 2.0.3.0

Published Nov 6, 2019

3.7

LOW

CVSS 3.1

EPSS 1.04%

Description

An issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization allows an adversary to can gain access to a miner's information about such as his recent payments, unclaimed Balance, Old Balance (at the time of December 2017 breach) , Projected payout, Mining stats like profitability, Efficiency, Number of workers, etc.. A valid Email address is required in order to retrieve this Information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
x_refsource_MISCExploitThird Party Advisory
https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/		x_refsource_MISCExploitThird Party Advisory
https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 6, 2019

Updated Aug 4, 2024

Reserved Jan 10, 2019

Link CVE-2019-6121

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-6121

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-6121