CVE-2013-0258
27.03.2013, 21:55
The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote attackers to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username.Enginsight
| Vendor | Product | Version |
|---|---|---|
| google_authenticator_login_project | ga_login | 7.x-1.0 |
| google_authenticator_login_project | ga_login | 7.x-1.0 |
| google_authenticator_login_project | ga_login | 7.x-1.0 |
| google_authenticator_login_project | ga_login | 7.x-1.1 |
| google_authenticator_login_project | ga_login | 7.x-1.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References