PatchTheCVEga login vulnerabilities and fixes
Recent CVEs affecting ga login, with upgrade or downgrade steps. 3 tracked.
Also searched as: galogin.
ga login has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-05-29. Highest priority: CVE-2013-0258 (score 42/100).
- CVE-2013-4178 MEDIUM 5.0 DOWNGRADE The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remo
- CVE-2013-4177 MEDIUM 5.0 DOWNGRADE The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not pr
- CVE-2013-0258 MEDIUM 6.8 DOWNGRADE The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authenticati
FAQ
How do I fix ga login vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ga login being exploited right now?
None of the tracked ga login CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ga login CVE should I patch first?
CVE-2013-0258 currently ranks highest (42/100): The Google Authenticator login (ga_login) module 7.x before 7.x-1.3 for Drupal, when multi-factor authenticati.