CVEvulnerability

CVE-2006-6641

7.5 HIGH Published 2006-12-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-12-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.

Affected configurations

• arcserve brightstor 11.1 • broadcom cleverpath portal (<= 4.71) • cleverpath aion bpm r10 • cleverpath aion bpm r10.1 • cleverpath aion bpm r10.2 • cleverpath portal r4.7 • cleverpath portal r4.51 • cleverpath portal r4.71 • etrust security command center r1 • etrust security command center r8 • unicenter asset and portfolio management r11 • unicenter database command center r11.1 • unicenter database management portal r11 • unicenter enterprise job manager r1 sp3 • unicenter management portal r2.0 • unicenter management portal r3.1 • unicenter management portal r11.0 • unicenter workload control center r1 sp4

References