CVE-2013-4178

Google Authenticator Login GA Login - Authentication Bypass

Title source: rule

Description

The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to obtain access by replaying the username, password, and one-time password (OTP).

References (4)

[Various Sources] https://drupal.org/node/1995482

[Various Sources] https://drupal.org/node/1995634

[Various Sources] https://drupal.org/node/1995706

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/59884

Scores

EPSS 0.0029

EPSS Percentile 52.4%

Classification

CWE

CWE-287

Status draft

Affected Products (11)

google_authenticator_login_project/ga_login

Timeline

Published May 29, 2014

Tracked Since Feb 18, 2026