| Package | Affected versions | Patched versions |
|---|---|---|
| ga login | = 7.x-1.0= 7.x-1.1= 7.x-1.2 |
The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authentication is enabled, allows remote attackers to bypass authentication for accounts without an associated Google Authenticator token by logging in with the username.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free