CVE-2013-4178: Google Authenticator Login Project Ga Login

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to obtain access by replaying the username, password, and one-time password (OTP).

Affected products

• Google Authenticator Login Project Ga Login: version 6.x-1.0 only; version 6.x-1.1 only; version 6.x-1.x only; version 7.x-1.0 only; version 7.x-1.1 only; version 7.x-1.2 only; …

Published 2014-05-29. Last modified 2026-06-16.