CVE-2006-6641 : Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.7

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.

Published 2006-12-20 00:28:00

Updated 2021-04-07 18:57:23

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2006-6641

Broadcom » Cleverpath Portal
Versions up to, including, (<=) 4.71
cpe:2.3:a:broadcom:cleverpath_portal:*:*:*:*:*:*:*:*
Matching versions
Arcserve » Brightstor » Version: 11.1
cpe:2.3:a:arcserve:brightstor:11.1:*:*:*:*:*:*:*
Matching versions
Cleverpath » Aion Bpm » Version: R10.2
cpe:2.3:a:cleverpath:aion_bpm:r10.2:*:*:*:*:*:*:*
Matching versions
Cleverpath » Aion Bpm » Version: R10
cpe:2.3:a:cleverpath:aion_bpm:r10:*:*:*:*:*:*:*
Matching versions
Cleverpath » Aion Bpm » Version: R10.1
cpe:2.3:a:cleverpath:aion_bpm:r10.1:*:*:*:*:*:*:*
Matching versions
Cleverpath » Portal » Version: R4.51
cpe:2.3:a:cleverpath:portal:r4.51:*:*:*:*:*:*:*
Matching versions
Cleverpath » Portal » Version: R4.7
cpe:2.3:a:cleverpath:portal:r4.7:*:*:*:*:*:*:*
Matching versions
Cleverpath » Portal » Version: R4.71
cpe:2.3:a:cleverpath:portal:r4.71:*:*:*:*:*:*:*
Matching versions
Etrust » Security Command Center » Version: R1
cpe:2.3:a:etrust:security_command_center:r1:*:*:*:*:*:*:*
Matching versions
Etrust » Security Command Center » Version: R8
cpe:2.3:a:etrust:security_command_center:r8:*:*:*:*:*:*:*
Matching versions
Unicenter » Asset And Portfolio Management » Version: R11
cpe:2.3:a:unicenter:asset_and_portfolio_management:r11:*:*:*:*:*:*:*
Matching versions
Unicenter » Database Command Center » Version: R11.1
cpe:2.3:a:unicenter:database_command_center:r11.1:*:*:*:*:*:*:*
Matching versions
Unicenter » Database Management Portal » Version: R11
cpe:2.3:a:unicenter:database_management_portal:r11:*:*:*:*:*:*:*
Matching versions
Unicenter » Enterprise Job Manager » Version: R1 Sp3
cpe:2.3:a:unicenter:enterprise_job_manager:r1_sp3:*:*:*:*:*:*:*
Matching versions
Unicenter » Management Portal » Version: R11.0
cpe:2.3:a:unicenter:management_portal:r11.0:*:*:*:*:*:*:*
Matching versions
Unicenter » Management Portal » Version: R2.0
cpe:2.3:a:unicenter:management_portal:r2.0:*:*:*:*:*:*:*
Matching versions
Unicenter » Management Portal » Version: R3.1
cpe:2.3:a:unicenter:management_portal:r3.1:*:*:*:*:*:*:*
Matching versions
Unicenter » Workload Control Center » Version: R1 Sp4
cpe:2.3:a:unicenter:workload_control_center:r1_sp4:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2006-6641

EPSS FAQ

1.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 85 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2006-6641

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2006-6641

Jump to

Vulnerability Details : CVE-2006-6641

Products affected by CVE-2006-6641

Exploit prediction scoring system (EPSS) score for CVE-2006-6641

CVSS scores for CVE-2006-6641

References for CVE-2006-6641