ByteOS Network

NVD Vulnerability Details :

CVE-2013-4177

Deferred

Source-secalert@redhat.com

Published At-29 May, 2014 | 14:19

Updated At-12 Apr, 2025 | 10:46

The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly identify user account names, which might allow remote attackers to bypass the two-factor authentication requirement via unspecified vectors.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

google_authenticator_login_project>>ga_login>>6.x-1.0

cpe:2.3:a:google_authenticator_login_project:ga_login:6.x-1.0:alpha1:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>6.x-1.0

cpe:2.3:a:google_authenticator_login_project:ga_login:6.x-1.0:beta1:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>6.x-1.0

cpe:2.3:a:google_authenticator_login_project:ga_login:6.x-1.0:beta2:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>6.x-1.1

cpe:2.3:a:google_authenticator_login_project:ga_login:6.x-1.1:*:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>6.x-1.x

cpe:2.3:a:google_authenticator_login_project:ga_login:6.x-1.x:dev:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>7.x-1.0

cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.0:*:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>7.x-1.0

cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.0:beta1:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>7.x-1.0

cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.0:dev:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>7.x-1.1

cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.1:*:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>7.x-1.2

cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.2:*:*:*:*:*:*:*

google_authenticator_login_project>>ga_login>>7.x-1.3

cpe:2.3:a:google_authenticator_login_project:ga_login:7.x-1.3:*:*:*:*:*:*:*

The Drupal Association

>>drupal>>-

cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/59884	secalert@redhat.com	N/A
https://drupal.org/node/1995482	secalert@redhat.com	Patch
https://drupal.org/node/1995634	secalert@redhat.com	Patch
https://drupal.org/node/1995706	secalert@redhat.com	Patch Vendor Advisory
http://www.securityfocus.com/bid/59884	af854a3a-2127-422b-91ae-364da2661108	N/A
https://drupal.org/node/1995482	af854a3a-2127-422b-91ae-364da2661108	Patch
https://drupal.org/node/1995634	af854a3a-2127-422b-91ae-364da2661108	Patch
https://drupal.org/node/1995706	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History