CVE-2019-6121
Low
Description
An issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization allows an adversary to can gain access to a miner's information about such as his recent payments, unclaimed Balance, Old Balance (at the time of December 2017 breach) , Projected payout, Mining stats like profitability, Efficiency, Number of workers, etc.. A valid Email address is required in order to retrieve this Information.
SeverityLow
CVSS3.7
Exploit probability—
ProductNicehash Miner
PublishedNov 6, 2019
First seenNov 6, 2019
How to fix
Update
- nicehash miner2.0.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nicehash miner | v < 2.0.3.0 | 2.0.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.