Authorization Flaw in NiceHash Miner Leads to Information Exposure
CVE-2019-6121

3.7LOW

Key Information:

Vendor

Nicehash

Status
Miner
Vendor
CVE Published:
6 November 2019

What is CVE-2019-6121?

An authorization issue in NiceHash Miner prior to version 2.0.3.0 enables adversaries to access sensitive information about miners. This includes details such as recent payments, balances from previous security breaches, projected payouts, and mining statistics. Access to this information necessitates a valid email address, making it crucial for users to secure their accounts against potential unauthorized access.

References

https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8B...
x_refsource_MISC
https://cyberworldmirror.com/nicehash-vulnerability-leake...
x_refsource_MISC

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2019-6121 : Authorization Flaw in NiceHash Miner Leads to Information Exposure