Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2006-6641

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.

Published

2006-12-20T00:28:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application arcserve brightstor 11.1 Yes
Application broadcom cleverpath_portal ≤ 4.71 Yes
Application cleverpath aion_bpm r10 Yes
Application cleverpath aion_bpm r10.1 Yes
Application cleverpath aion_bpm r10.2 Yes
Application cleverpath portal r4.7 Yes
Application cleverpath portal r4.51 Yes
Application cleverpath portal r4.71 Yes
Application etrust security_command_center r1 Yes
Application etrust security_command_center r8 Yes
Application unicenter asset_and_portfolio_management r11 Yes
Application unicenter database_command_center r11.1 Yes
Application unicenter database_management_portal r11 Yes
Application unicenter enterprise_job_manager r1_sp3 Yes
Application unicenter management_portal r2.0 Yes
Application unicenter management_portal r3.1 Yes
Application unicenter management_portal r11.0 Yes
Application unicenter workload_control_center r1_sp4 Yes
References