low3.7
CVE-2019-6121
An issue was discovered in NiceHash Miner before 2.0.3.0.
Impact
An issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization allows an adversary to can gain access to a miner's information about such as his recent payments, unclaimed Balance, Old Balance (at the time of December 2017 breach) , Projected payout, Mining stats like profitability, Efficiency, Number of workers, etc.. A valid Email address is required in order to retrieve this Information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nicehash | Miner | before 2.0.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
- https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
- https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
- https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit