nvd-json-data-feeds/CVE-2019/CVE-2019-61xx/CVE-2019-6122.json

{
  "id": "CVE-2019-6122",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2019-11-06T18:15:10.430",
  "lastModified": "2020-08-24T17:37:01.140",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "A Username Enumeration via Error Message issue was discovered in NiceHash Miner before 2.0.3.0 because an \"EMAIL DOES NOT EXIST\" error message occurs whenever a submitted email address is incorrect, but there is a different error message for invalid credentials with a correct email address."
    },
    {
      "lang": "es",
      "value": "Se descubri\u00f3 un problema de Enumeraci\u00f3n de Nombre de Usuario mediante un Mensaje de Error en NiceHash Miner versiones anteriores a la versi\u00f3n 2.0.3.0, porque ocurre un mensaje de error \"EMAIL DOES NOT EXIST\" cada vez que una direcci\u00f3n de correo electr\u00f3nico enviada es incorrecta, pero existe un mensaje de error diferente para credenciales no v\u00e1lidas con una direcci\u00f3n de correo electr\u00f3nico correcta."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 3.1,
          "baseSeverity": "LOW"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 1.4
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "accessVector": "NETWORK",
          "accessComplexity": "MEDIUM",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-209"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:nicehash:miner:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2.0.3.0",
              "matchCriteriaId": "5B26E244-565A-4DE5-BB26-D95A530D69E2"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://cyberworldmirror.com/nicehash-vulnerability-leaked-miners-information/",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://docs.google.com/document/d/1OubhuTRzuTMnkZ9SCFb8BtJVbTu840wDxyWu3VWHwvs/edit",
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    }
  ]
}