NVD

Id
36613  
Name
CVE-2013-0258  
Description
The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote attackers to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-03-27  
Modified Date
2013-04-05  
Seq
2013-0258  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187101 36613 CVE-2013-0258 http://drupal.org/node/1902102  View
187102 36613 CVE-2013-0258 http://drupal.org/node/1903282  View
187103 36613 CVE-2013-0258 http://drupalcode.org/project/ga_login.git/commitdiff/50b032d  View
187104 36613 CVE-2013-0258 [oss-security] 20130204 Re: CVE request for Drupal contributed modules  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20472 JVNDB-2013-002047 Drupal 用 Google Authenticator login モジュールにおける認証を回避される脆弱性 Drupal 用 Google Authenticator login (ga_login) モジュールには、マルチファクタ認証 (multi-factor authentication) が有効な場合、関連する Google Authenticator トークンのないアカウントに対する認証を回避される脆弱性が存在します。 CVE-2013-0258 60200 CVE-2013-0258 36613 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002047.html 2013-01-29 2013-04-01 View