Lucene search
HistoryMay 29, 2014 - 2:19 p.m.
CVE-2013-4178
google authenticator
login module
remote attackers
access
replay
drupal
cve-2013-4178
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.0%
The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to obtain access by replaying the username, password, and one-time password (OTP).
Affected configurations
Node
google_authenticator_login_projectga_loginMatch6.x-1.0alpha1
ORgoogle_authenticator_login_projectga_loginMatch6.x-1.0beta1
ORgoogle_authenticator_login_projectga_loginMatch6.x-1.0beta2
ORgoogle_authenticator_login_projectga_loginMatch6.x-1.1
ORgoogle_authenticator_login_projectga_loginMatch6.x-1.xdev
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.0
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.0beta1
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.0dev
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.1
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.2
ORgoogle_authenticator_login_projectga_loginMatch7.x-1.3
drupaldrupalMatch-
Related
prion
prion
Default credentials
2014-05-29 14:19:00
nvd
nvd
CVE-2013-4178
2014-05-29 14:19:07
cvelist
cvelist
CVE-2013-4178
2014-05-29 14:00:00
drupal
drupal
SA-CONTRIB-2013-047 - Google Authenticator login - Access Bypass
2013-05-15 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.0%
Related for CVE-2013-4178