Lucene search
HistoryMay 29, 2014 - 2:19 p.m.
CVE-2013-4177
cve-2013-4177
google authenticator
drupal
two-factor authentication
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.6%
The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly identify user account names, which might allow remote attackers to bypass the two-factor authentication requirement via unspecified vectors.
Affected configurations
Node
google_authenticator_login_projectga_loginMatch6.x-1.0alpha1
ORgoogle_authenticator_login_projectga_loginMatch6.x-1.0beta1
ORgoogle_authenticator_login_projectga_loginMatch6.x-1.0beta2
ORgoogle_authenticator_login_projectga_loginMatch6.x-1.1
ORgoogle_authenticator_login_projectga_loginMatch6.x-1.xdev
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.0
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.0beta1
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.0dev
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.1
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.2
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.3
drupaldrupalMatch-
Related
prion
prion
Authentication flaw
2014-05-29 14:19:00
nvd
nvd
CVE-2013-4177
2014-05-29 14:19:07
cvelist
cvelist
CVE-2013-4177
2014-05-29 14:00:00
drupal
drupal
SA-CONTRIB-2013-047 - Google Authenticator login - Access Bypass
2013-05-15 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.6%
Related for CVE-2013-4177