Vulnerabilities > CVE-2019-6121 - Missing Authorization vulnerability in Nicehash Miner

CVSS 3.7 - LOW

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

high complexity

nicehash

CWE-862

NVD

Published: 2019-11-06

Updated: 2024-11-21

Summary

An issue was discovered in NiceHash Miner before 2.0.3.0. Missing Authorization allows an adversary to can gain access to a miner's information about such as his recent payments, unclaimed Balance, Old Balance (at the time of December 2017 breach) , Projected payout, Mining stats like profitability, Efficiency, Number of workers, etc.. A valid Email address is required in order to retrieve this Information.

Vulnerable Configurations

Part	Description	Count
Application	Nicehash Nicehash Miner 1.0.0.0 Nicehash Miner 1.1.0.0 Nicehash Miner 1.1.0.1 Nicehash Miner 1.1.0.2 Nicehash Miner 1.1.0.3 Nicehash Miner 1.1.0.4 Nicehash Miner 1.1.0.5 Nicehash Miner 1.2.0.0 Nicehash Miner 1.2.0.1 Nicehash Miner 1.2.0.2 Nicehash Miner 1.2.1.0 Nicehash Miner 1.2.2.0 Nicehash Miner 1.2.2.2 Nicehash Miner 1.2.3.0 Nicehash Miner 1.2.3.1 Nicehash Miner 1.2.3.2 Nicehash Miner 1.3.0.0 Nicehash Miner 1.3.0.1 Nicehash Miner 1.3.0.2 Nicehash Miner 1.3.0.3 Nicehash Miner 1.4.0.0 Nicehash Miner 1.4.0.1 Nicehash Miner 1.4.0.2 Nicehash Miner 1.5.0.0 Nicehash Miner 1.5.1.0 Nicehash Miner 1.6.0.0 Nicehash Miner 1.6.0.1 Nicehash Miner 1.6.1.0 Nicehash Miner 1.6.1.1 Nicehash Miner 1.6.1.2 Nicehash Miner 1.6.1.3 Nicehash Miner 1.6.1.4 Nicehash Miner 1.7.1.0 Nicehash Miner 1.7.1.1 Nicehash Miner 1.7.1.2 Nicehash Miner 1.7.1.3 Nicehash Miner 1.7.1.4 Nicehash Miner 1.7.2.0 Nicehash Miner 1.7.3.0 Nicehash Miner 1.7.3.1 Nicehash Miner 1.7.3.2 Nicehash Miner 1.7.3.3 Nicehash Miner 1.7.3.4 Nicehash Miner 1.7.3.5 Nicehash Miner 1.7.3.6 Nicehash Miner 1.7.3.7 Nicehash Miner 1.7.3.8 Nicehash Miner 1.7.3.9 Nicehash Miner 1.7.3.10 Nicehash Miner 1.7.3.11 Nicehash Miner 1.7.3.12 Nicehash Miner 1.7.4.0 Nicehash Miner 1.7.4.1 Nicehash Miner 1.7.4.2 Nicehash Miner 1.7.4.3 Nicehash Miner 1.7.4.4 Nicehash Miner 1.7.4.5 Nicehash Miner 1.7.5.0 Nicehash Miner 1.7.5.1 Nicehash Miner 1.7.5.3 Nicehash Miner 1.7.5.5 Nicehash Miner 1.7.5.7 Nicehash Miner 1.7.5.9 Nicehash Miner 1.7.5.10 Nicehash Miner 1.7.5.12 Nicehash Miner 1.7.5.13 Nicehash Miner 1.7.5.15 Nicehash Miner 1.7.5.16 Nicehash Miner 1.7.5.17 Nicehash Miner 1.7.5.18 Nicehash Miner 1.7.5.19 Nicehash Miner 1.7.6.0 Nicehash Miner 1.7.6.1 Nicehash Miner 1.7.6.2 Nicehash Miner 1.7.6.3 Nicehash Miner 1.8.0.0 Nicehash Miner 1.8.0.1 Nicehash Miner 1.8.0.2 Nicehash Miner 1.8.1.0 Nicehash Miner 1.8.1.1 Nicehash Miner 1.8.1.2 Nicehash Miner 1.8.1.3 Nicehash Miner 1.8.1.4 Nicehash Miner 1.8.1.5 Nicehash Miner 1.8.1.6 Nicehash Miner 1.8.1.7 Nicehash Miner 1.8.1.8 Nicehash Miner 1.8.1.9 Nicehash Miner 1.8.1.10 Nicehash Miner 1.8.1.11 Nicehash Miner 1.9.0.0 Nicehash Miner 1.9.0.1 Nicehash Miner 1.9.0.2 Nicehash Miner 1.9.0.3 Nicehash Miner 1.9.0.4 Nicehash Miner 1.9.0.5 Nicehash Miner 1.9.0.6 Nicehash Miner 1.9.0.7 Nicehash Miner 1.9.0.8 Nicehash Miner 1.9.0.9 Nicehash Miner 1.9.0.10 Nicehash Miner 1.9.0.11 Nicehash Miner 1.9.0.12 Nicehash Miner 1.9.0.13 Nicehash Miner 1.9.0.14 Nicehash Miner 1.9.0.15 Nicehash Miner 1.9.0.16 Nicehash Miner 1.9.0.17 Nicehash Miner 1.9.0.18 Nicehash Miner 1.9.0.19 Nicehash Miner 1.9.0.20 Nicehash Miner 1.9.0.21 Nicehash Miner 1.9.0.22 Nicehash Miner 1.9.0.23 Nicehash Miner 1.9.1.0 Nicehash Miner 1.9.1.1 Nicehash Miner 1.9.1.2 Nicehash Miner 1.9.1.4 Nicehash Miner 1.9.1.5 Nicehash Miner 1.9.1.6 Nicehash Miner 1.9.1.7 Nicehash Miner 1.9.1.8 Nicehash Miner 1.9.1.9 Nicehash Miner 1.9.1.10 Nicehash Miner 1.9.1.11 Nicehash Miner 1.9.1.12 Nicehash Miner 1.9.1.13 Nicehash Miner 1.9.1.14 Nicehash Miner 1.9.2.6 Nicehash Miner 1.9.2.7 Nicehash Miner 1.9.2.8 Nicehash Miner 1.9.2.9 Nicehash Miner 1.9.2.10 Nicehash Miner 1.9.2.11 Nicehash Miner 1.9.2.12 Nicehash Miner 1.9.2.13 Nicehash Miner 1.9.2.14 Nicehash Miner 1.9.2.15 Nicehash Miner 1.9.2.16 Nicehash Miner 2.0.2.8	140

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References