Vulnerability · NVD

CVE-2012-6140

N/A Published on 2013-04-24

pam_google_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, which allows local users to bypass intended access restrictions and discover a shared secret via standard filesystem operations, a different vulnerability than CVE-2013-0258.

EPSS 0.23% exploit very unlikely percentile 13.8%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Google Authenticator iOS com.google.OTP

Affected — Fixed in — Latest tracked — undetermined
Google Authenticator Android com.google.android.apps.authenticator2

Affected — Fixed in — Latest tracked 6.0 undetermined

Vulnerable CPE configurations (6)

Vendor	Product	Platform	Versions	CPE 2.3 URI
google	authenticator All platforms (wildcard)	All platforms (wildcard)	≤0.91	cpe:2.3:a:google:authenticator::::::::
google	authenticator All platforms (wildcard)	All platforms (wildcard)	≤0.91	cpe:2.3:a:google:authenticator::::::::
google	authenticator All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:google:authenticator:0.86:::::::*
google	authenticator All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:google:authenticator:0.86:::::::*
google	authenticator All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:google:authenticator:0.87:::::::*
google	authenticator All platforms (wildcard)	All platforms (wildcard)	—	cpe:2.3:a:google:authenticator:0.87:::::::*

View on NVD ↗