CVE-2013-4177

no score yetEPSS 1.4%

The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly identify user account names, which might allow remote attackers to bypass the two-factor authentication requirement via unspecified vectors.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-05-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

google_authenticator_login_project:ga_login

References

http://www.securityfocus.com/bid/59884
https://drupal.org/node/1995482
https://drupal.org/node/1995634
https://drupal.org/node/1995706
http://www.securityfocus.com/bid/59884

Check your stack JSON