Drupal Email Two-Factor Authentication Weak Authentication Vulnerability Allowing Brute Force
Vulnerability
A weak authentication vulnerability has been identified in the Drupal Email Two-Factor Authentication (TFA) module, versions 0.0.0 prior to 2.0.3. This vulnerability allows brute force attacks, potentially compromising user accounts by exploiting the TFA authentication process.
Impact
Exploitation of this vulnerability could lead to unauthorized access to user accounts by bypassing or weakening the two-factor authentication mechanism.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
6.6remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.