CVE-2019-6122

Опубликовано: 06 нояб. 2019

Источник: nvd

CVSS3: 3.1

CVSS2: 4.3

EPSS Низкий

Описание

A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an "EMAIL DOES NOT EXIST" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address.

Ссылки

https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
Exploit
Third Party Advisory
https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
Exploit
Third Party Advisory
https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/
Exploit
Third Party Advisory
https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nicehash:miner:*:*:*:*:*:*:*:*

Версия до 2.0.3.0 (исключая)

EPSS

Процентиль: 57%

0.00356

Низкий

3.1 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-209

Связанные уязвимости

GHSA-rv55-37hq-r98j

github

больше 3 лет назад