CVE-2006-6641
Estado: ModificadaAlta (7.5)—
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.59%
- Percentil entre todas las CVEs puntuadas: 85
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (11)
Arcserve — BrightstorBroadcom — Cleverpath PortalCleverpath — Aion BPMCleverpath — PortalEtrust — Security Command CenterUnicenter — Asset AND Portfolio ManagementUnicenter — Database Command CenterUnicenter — Database Management PortalUnicenter — Enterprise JOB ManagerUnicenter — Management PortalUnicenter — Workload Control Center
CWE
- NVD-CWE-Other
Referencias
- http://secunia.com/advisories/23426
- http://securitytracker.com/id?1017429
- http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp
- http://www.osvdb.org/30854
- http://www.securityfocus.com/archive/1/455041/100/0/threaded
- http://www.securityfocus.com/bid/21681
- http://www.vupen.com/english/advisories/2006/5091
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876
- http://secunia.com/advisories/23426
- http://securitytracker.com/id?1017429
- http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp
- http://www.osvdb.org/30854
- http://www.securityfocus.com/archive/1/455041/100/0/threaded
- http://www.securityfocus.com/bid/21681
- http://www.vupen.com/english/advisories/2006/5091
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876
JSON original (NVD)
Mostrar
{
"id": "CVE-2006-6641",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2006-12-20T00:28:00.000",
"references": [
{
"url": "http://secunia.com/advisories/23426",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1017429",
"source": "cve@mitre.org"
},
{
"url": "http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/30854",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/455041/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/21681",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2006/5091",
"source": "cve@mitre.org"
},
{
"url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/23426",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1017429",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/30854",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/455041/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/21681",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2006/5091",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en CA CleverPath Portal anterior a la versión de mantenimiento 4.71.001_179_060830, usado en múltiples productos incluyendo BrightStor Portal r11.1, CleverPath Aion BPM r10 hasta r10.2, eTrust Security Command Center r1 y r8, y Unicenter, no actúa adecuadamente cuando múltiples servidores Portal son iniciados al mismo tiempo y comparten el mismo almacén de información, lo cual puede provocar que un usuario de Portal herede la sesión y credenciales de un usuario que está en otro servidor Portal."
}
],
"lastModified": "2026-06-16T22:33:31.147",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:arcserve:brightstor:11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6825A6CF-F540-4516-8982-E32B22D477DC"
},
{
"criteria": "cpe:2.3:a:broadcom:cleverpath_portal:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78D7CC0F-3AAF-40F0-B178-B964AF04BFC7",
"versionEndIncluding": "4.71"
},
{
"criteria": "cpe:2.3:a:cleverpath:aion_bpm:r10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1398293A-8C8D-405B-A13B-7202D8A2A12B"
},
{
"criteria": "cpe:2.3:a:cleverpath:aion_bpm:r10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8DC0166-B40B-4FE9-A5FE-4674C184EE68"
},
{
"criteria": "cpe:2.3:a:cleverpath:aion_bpm:r10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01482330-54BA-40E1-908C-884CF2C0B139"
},
{
"criteria": "cpe:2.3:a:cleverpath:portal:r4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8D75B44-E386-4BE7-95F6-23804FBFBC87"
},
{
"criteria": "cpe:2.3:a:cleverpath:portal:r4.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD878559-D8DF-4043-9F78-2780F95D103A"
},
{
"criteria": "cpe:2.3:a:cleverpath:portal:r4.71:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5046BE4F-2445-4CB1-93F1-5BFFA7AD5578"
},
{
"criteria": "cpe:2.3:a:etrust:security_command_center:r1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDBDB112-8526-4DD5-BE23-45D1E15FDBED"
},
{
"criteria": "cpe:2.3:a:etrust:security_command_center:r8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEE3CEFA-F003-408D-A066-39C91E958C75"
},
{
"criteria": "cpe:2.3:a:unicenter:asset_and_portfolio_management:r11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DEA53F1-A4D0-4F12-A0FD-3D726072A063"
},
{
"criteria": "cpe:2.3:a:unicenter:database_command_center:r11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "056B5064-4FB7-4196-A975-E6661F0C589C"
},
{
"criteria": "cpe:2.3:a:unicenter:database_management_portal:r11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B0FDF01-4D34-4F2E-9A8E-7A1EB95BC83D"
},
{
"criteria": "cpe:2.3:a:unicenter:enterprise_job_manager:r1_sp3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E3CFF24-EA58-4B45-8BA7-B6CF02650CAF"
},
{
"criteria": "cpe:2.3:a:unicenter:management_portal:r2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84ABEA0B-9388-4942-AC12-40AE37C87D99"
},
{
"criteria": "cpe:2.3:a:unicenter:management_portal:r3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE826A5B-B5D1-46CF-9FA9-81041D9C9187"
},
{
"criteria": "cpe:2.3:a:unicenter:management_portal:r11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05619FF7-BB58-434D-8177-16B8D4BC792B"
},
{
"criteria": "cpe:2.3:a:unicenter:workload_control_center:r1_sp4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "017280EE-8C88-43FC-BA76-A1EEF4607036"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}