Drupal Authenticator Login module < 2.0.6 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Ahmed Raza in WordPress Module Authenticator Login versions 2.0.6...

PT-2014-2750

Name of the Vulnerable Software and Affected Versions Google Authenticator login module versions 6.x-1.x before 6.x-1.2 Google Authenticator login module versions 7.x-1.x before 7.x-1.4 Description The issue allows remote attackers to obtain access by replaying the username, password, and one-tim...

PT-2014-2749

Name of the Vulnerable Software and Affected Versions Google Authenticator login module versions 6.x-1.x before 6.x-1.2 Google Authenticator login module versions 7.x-1.x before 7.x-1.4 Description The issue is related to the Google Authenticator login module for Drupal, where it fails to properl...

PT-2013-2193

Name of the Vulnerable Software and Affected Versions Drupal Google Authenticator login module versions prior to 7.x-1.3 Description The issue allows remote attackers to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username. This occur...