The Google Authenticator login (ga_login) module 7.x prior to 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote malicious users to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
google_authenticator_login_project ga_login 7.x-1.2 |
||
google_authenticator_login_project ga_login 7.x-1.0 |
||
google_authenticator_login_project ga_login 7.x-1.1 |