Authentication flaw

2014-05-2914:19:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

JSON

The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly identify user account names, which might allow remote attackers to bypass the two-factor authentication requirement via unspecified vectors.

CPENameOperatorVersion
ga_logineq6.x-1.0 beta2
ga_logineq6.x-1.0 alpha1
ga_logineq6.x-1.0 beta1
ga_logineq6.120.11
ga_logineq6.x-1.x dev
ga_logineq7.x-1.0 dev
ga_logineq7.120.10
ga_logineq7.x-1.0 beta1
ga_logineq7.120.11
ga_logineq7.120.12

Name	Operator	Version
ga_login	eq	6.x-1.0 beta2
ga_login	eq	6.x-1.0 alpha1
ga_login	eq	6.x-1.0 beta1
ga_login	eq	6.120.11
ga_login	eq	6.x-1.x dev
ga_login	eq	7.x-1.0 dev
ga_login	eq	7.120.10
ga_login	eq	7.x-1.0 beta1
ga_login	eq	7.120.11
ga_login	eq	7.120.12