CVE-2006-6641
First published: Wed Dec 20 2006(Updated: )
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CA Unicenter Enterprise Job Manager | =r1_sp3 | |
| Broadcom CleverPath AION | =r10.2 | |
| Broadcom CleverPath AION | =r10 | |
| Broadcom CleverPath Portal | =r4.71 | |
| Broadcom CleverPath AION | =r10.1 | |
| CA Unicenter Management Portal | =r11 | |
| Broadcom Unicenter Management Portal | =r2.0 | |
| Broadcom CleverPath Portal | =r4.51 | |
| Broadcom Unicenter Management Portal | =r11.0 | |
| Broadcom Unicenter Management Portal | =r3.1 | |
| Broadcom Unicenter Asset Portfolio Management | =r11 | |
| Unicenter Database Command Center | =r11.1 | |
| Unicenter Workload Control Center | =r1_sp4 | |
| CA BrightStor ARCserve Backup | =11.1 | |
| Broadcom eTrust Security Command Center | =r8 | |
| Broadcom eTrust Security Command Center | =r1 | |
| Broadcom CleverPath Portal | =r4.7 | |
| Broadcom CleverPath Portal | <=4.71 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp
- http://secunia.com/advisories/23426
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876
- http://www.securityfocus.com/bid/21681
- http://www.osvdb.org/30854
- http://securitytracker.com/id?1017429
- http://www.vupen.com/english/advisories/2006/5091
- http://www.securityfocus.com/archive/1/455041/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-6641?
CVE-2006-6641 has not been assigned a specific CVSS score, but it is categorized as a vulnerability that may impact system integrity.
How do I fix CVE-2006-6641?
The vulnerability can be mitigated by upgrading to the maintenance version 4.71.001_179_060830 or later of CA CleverPath Portal and related products.
What software is affected by CVE-2006-6641?
CVE-2006-6641 affects multiple products including CA CleverPath Portal, CA BrightStor ARCserve Backup, and eTrust Security Command Center.
Can CVE-2006-6641 be exploited remotely?
Yes, CVE-2006-6641 could potentially be exploited remotely if an attacker interacts with an affected application.
What are the implications of CVE-2006-6641?
Exploiting CVE-2006-6641 may allow unauthorized access or manipulation of the affected systems.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/unicenter
- canonical/ca unicenter enterprise job manager
- version/ca unicenter enterprise job manager/r1_sp3
- vendor/cleverpath
- canonical/broadcom cleverpath aion
- version/broadcom cleverpath aion/r10.2
- version/broadcom cleverpath aion/r10
- canonical/broadcom cleverpath portal
- version/broadcom cleverpath portal/r4.71
- version/broadcom cleverpath aion/r10.1
- canonical/ca unicenter management portal
- version/ca unicenter management portal/r11
- canonical/broadcom unicenter management portal
- version/broadcom unicenter management portal/r2.0
- version/broadcom cleverpath portal/r4.51
- version/broadcom unicenter management portal/r11.0
- version/broadcom unicenter management portal/r3.1
- canonical/broadcom unicenter asset portfolio management
- version/broadcom unicenter asset portfolio management/r11
- canonical/unicenter database command center
- version/unicenter database command center/r11.1
- canonical/unicenter workload control center
- version/unicenter workload control center/r1_sp4
- vendor/arcserve
- canonical/ca brightstor arcserve backup
- version/ca brightstor arcserve backup/11.1
- vendor/etrust
- canonical/broadcom etrust security command center
- version/broadcom etrust security command center/r8
- version/broadcom etrust security command center/r1
- version/broadcom cleverpath portal/r4.7
- vendor/broadcom
- version/broadcom cleverpath portal/4.71