Skip to content
appaloosa scout logo main rounded
N/A

CVE-2012-6140

pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than CVE-2013-0258.

Affected mobile apps

Google Authenticator
com.google.OTP
1 open
Google Authenticator
com.google.android.apps.authenticator2
1 open

Vulnerable CPE configurations

Vendor Product Platform Versions CPE 2.3 URI
google authenticator Android ≤0.91 cpe:2.3:a:google:authenticator:*:*:*:*:*:*:*:*
google authenticator iOS ≤0.91 cpe:2.3:a:google:authenticator:*:*:*:*:*:*:*:*
google authenticator Android — cpe:2.3:a:google:authenticator:0.86:*:*:*:*:*:*:*
google authenticator iOS — cpe:2.3:a:google:authenticator:0.86:*:*:*:*:*:*:*
google authenticator Android — cpe:2.3:a:google:authenticator:0.87:*:*:*:*:*:*:*
google authenticator iOS — cpe:2.3:a:google:authenticator:0.87:*:*:*:*:*:*:*
View on NVD ↗