CVE-2019-6122

Published: Nov 6, 2019Modified: Jun 17, 2026

3.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 1.6 / Impact: 1.4

Source: NVD

Description

A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an "EMAIL DOES NOT EXIST" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address.

Affected (1)

Products: Nicehash: Miner

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nicehash Miner	Before 2.0.3.0

Related CWEs

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (4)

https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/

Source: cve@mitre.org

ExploitThird Party Advisory

https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit

Source: cve@mitre.org

ExploitThird Party Advisory

https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.