CVE-2006-6641
High
Description
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Arcserve Brightstor
PublishedDec 20, 2006
First seenDec 20, 2006
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arcserve brightstor | 11.1 | — |
| broadcom cleverpath_portal | v ≤ 4.71 | — |
| cleverpath aion_bpm | r10, r10.1, r10.2 | — |
| cleverpath portal | r4.7, r4.51, r4.71 | — |
| etrust security_command_center | r1, r8 | — |
| unicenter asset_and_portfolio_management | r11 | — |
| unicenter database_command_center | r11.1 | — |
| unicenter database_management_portal | r11 | — |
| unicenter enterprise_job_manager | r1_sp3 | — |
| unicenter management_portal | r2.0, r3.1, r11.0 | — |
| unicenter workload_control_center | r1_sp4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.