CVE-2019-6120

An issue was discovered in NiceHash Miner before 2.0.3.0

published November 6, 2019

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

An issue was discovered in NiceHash Miner before 2.0.3.0. A missing rate limit while adding a wallet via Email address allows remote attackers to submit a large number of email addresses to identify valid ones. By exploiting this vulnerability with CVE-2019-6122 (Username Enumeration) an adversary can enumerate a large number of valid users' Email addresses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01736 · 77.5th percentile
Published
2019-11-06T17:12Z
EPSS history
Timeline
  • 06 NOV 17:12Z
    An issue was discovered in NiceHash Miner before 2.0.3.0
    cvelistv5