Unscored severity · published Dec 20, 2006
CVE-2006-6641
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AB
Aion Bpm · Cleverpath
r10; r10.1; r10.2 · source: NVD
AA
Asset And Portfolio Management · Unicenter
r11 · source: NVD
BR
Brightstor · Arcserve
11.1 · source: NVD
CP
Cleverpath Portal · Broadcom
through 4.71 · source: NVD
DC
Database Command Center · Unicenter
r11.1 · source: NVD
DM
Database Management Portal · Unicenter
r11 · source: NVD
EJ
Enterprise Job Manager · Unicenter
r1_sp3 · source: NVD
MP
Management Portal · Unicenter
r2.0; r3.1; r11.0 · source: NVD
PO
Portal · Cleverpath
r4.7; r4.51; r4.71 · source: NVD
SC
Security Command Center · Etrust
r1; r8 · source: NVD
WC
Workload Control Center · Unicenter
r1_sp4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6641
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6641
secunia.com
http://secunia.com/advisories/23426
securitytracker.com
http://securitytracker.com/id?1017429
Vendor Advisory
http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp
www.osvdb.org
http://www.osvdb.org/30854
www.securityfocus.com
http://www.securityfocus.com/archive/1/455041/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21681