CVE-2013-4178
The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to obtain access by replaying the username, password, and one-time password (OTP).
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2014-05-29
- Last modified
- 2024-08-06
- Weaknesses
- CWE-287
Affected products
References
- http://www.securityfocus.com/bid/59884
- https://drupal.org/node/1995482
- https://drupal.org/node/1995634
- https://drupal.org/node/1995706
