CVE-2013-0258

no score yetEPSS 1.4%

The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote attackers to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2013-03-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

google_authenticator_login_project:ga_login

References

http://drupal.org/node/1902102
http://drupal.org/node/1903282
http://drupalcode.org/project/ga_login.git/commitdiff/50b032d
http://www.openwall.com/lists/oss-security/2013/02/05/1
http://drupal.org/node/1902102

Check your stack JSON