NVD

Id
65185  
Name
CVE-2006-6641  
Description
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-12-19  
Modified Date
2011-03-07  
Seq
2006-6641  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
340297 65185 CVE-2006-6641 1017429  View
340298 65185 CVE-2006-6641 http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp  View
340299 65185 CVE-2006-6641 20061221 [CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability  View
340300 65185 CVE-2006-6641 21681  View
340301 65185 CVE-2006-6641 ADV-2006-5091  View
340302 65185 CVE-2006-6641 http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59510 JVNDB-2006-001776 BrightStor Portal などで使用される CA CleverPath Portal における異なる Portal サーバのユーザのセッションおよび資格情報を継承される脆弱性 BrightStor Portal、CleverPath Aion BPM、eTrust Security Command Center および Unicenter などで使用される CA CleverPath Portal には、複数の Portal サーバが同時に開始し同じ格納データを共有する際の処理に不備があるため、異なる Portal サーバのユーザのセッションおよび資格情報を継承される脆弱性が存在します。 CVE-2006-6641 22743 CVE-2006-6641 65185 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001776.html 2006-12-19 2012-06-26 View