medium5.0
CVE-2013-4177
The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly identify user account names, which might a…
Impact
The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly identify user account names, which might allow remote attackers to bypass the two-factor authentication requirement via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Google Authenticator Login Project | Ga Login | Versions 6.x-1.0, 6.x-1.1, 6.x-1.x, 7.x-1.0, 7.x-1.1, 7.x-1.2 |