NetSight
IP …
high7.5

CVE-2006-6641

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.…

Impact

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.

Affected products

VendorProductAffected versions
ArcserveBrightstor
Version 11.1
BroadcomCleverpath Portal
through 4.71
CleverpathAion Bpm
Versions r10, r10.1, r10.2
CleverpathPortal
Versions r4.7, r4.51, r4.71
EtrustSecurity Command Center
Versions r1, r8
UnicenterAsset And Portfolio Management
Version r11
UnicenterDatabase Command Center
Version r11.1
UnicenterDatabase Management Portal
Version r11
UnicenterEnterprise Job Manager
Version r1_sp3
UnicenterManagement Portal
Versions r2.0, r3.1, r11.0
UnicenterWorkload Control Center
Version r1_sp4

References