What’s Vulnerable › Vulnerabilities

CVE-2006-6641

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-12-20 · updated 2026-06-16

Description

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.

Affected products

• Arcserve Brightstor: 11.1
• Broadcom Cleverpath Portal: through 4.71
• Cleverpath Aion Bpm: r10, r10.1, r10.2
• Cleverpath Portal: r4.7, r4.51, r4.71
• Etrust Security Command Center: r1, r8
• Unicenter Asset And Portfolio Management: r11
• Unicenter Database Command Center: r11.1
• Unicenter Database Management Portal: r11
• Unicenter Enterprise Job Manager: r1_sp3
• Unicenter Management Portal: r2.0, r3.1, r11.0
• Unicenter Workload Control Center: r1_sp4

References

• http://secunia.com/advisories/23426
• http://securitytracker.com/id?1017429
• http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp
• http://www.osvdb.org/30854
• http://www.securityfocus.com/archive/1/455041/100/0/threaded
• http://www.securityfocus.com/bid/21681
• http://www.vupen.com/english/advisories/2006/5091
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876
• http://secunia.com/advisories/23426
• http://securitytracker.com/id?1017429
• http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp
• http://www.osvdb.org/30854

Get alerted when CVE-2006-6641 or the next vulnerability affects your stack