CVE-2006-6641: High severity Arcserve Brightstor vulnerability
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001179060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6641?
CVE-2006-6641 has not been assigned a specific CVSS score, but it is categorized as a vulnerability that may impact system integrity.
How do I fix CVE-2006-6641?
The vulnerability can be mitigated by upgrading to the maintenance version 4.71.001_179_060830 or later of CA CleverPath Portal and related products.
What software is affected by CVE-2006-6641?
CVE-2006-6641 affects multiple products including CA CleverPath Portal, CA BrightStor ARCserve Backup, and eTrust Security Command Center.
Can CVE-2006-6641 be exploited remotely?
Yes, CVE-2006-6641 could potentially be exploited remotely if an attacker interacts with an affected application.
What are the implications of CVE-2006-6641?
Exploiting CVE-2006-6641 may allow unauthorized access or manipulation of the affected systems.