CVE-2013-2197

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal, when using the login delay option, allows remote attackers to cause a denial of service (CPU consumption) via a large number of failed login attempts.

Score

CVSS 2.0 4.3 Medium

Status

Modified - secalert@redhat.com

Published

2013-08-28

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Login Security (Login Security Project)

References

• http://www.openwall.com/lists/oss-security/2013/06/20/3
• https://drupal.org/node/2023503
• https://drupal.org/node/2023507
• https://drupal.org/node/2023585