CVE-2006-6641

Home/CVE/Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple pr

CVE

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple pr

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.

HIGH · CVSS 7.5 EPSS 0.01235

Schedule remediation

CVSS base score ≥ 7.0

Sigma rules1 YARA rules0

▤

Affected Products & Versions

arcserve brightstorall versions
broadcom cleverpath portal<= 4.71
cleverpath aion bpmall versions
cleverpath portalall versions
etrust security command centerall versions
unicenter asset and portfolio managementall versions
unicenter database command centerall versions
unicenter database management portalall versions
Show all 11 affected productsunicenter enterprise job managerall versions
unicenter management portalall versions
unicenter workload control centerall versions

◈

Sigma Hunt Rules

Exact rules name this CVE ID. Product rules name an affected product in their title. Related rules cover techniques used by actors who exploited this CVE. Showing the most relevant matches; the complete related set is on the full drill-down.

productmediumFortiGate - New VPN SSL Web Portal Added

▣

Scoring & Timeline

7.5

HIGH · CVSS v2 (legacy) · cve@mitre.org

View on NVD

This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.

v2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Published to NVD20 Dec 2006 · 12:28 AM

🔗

References & Sources

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://secunia.com/advisories/23426

http://securitytracker.com/id?1017429

http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.aspVendor Advisory

http://www.osvdb.org/30854

http://www.securityfocus.com/archive/1/455041/100/0/threaded

http://www.securityfocus.com/bid/21681

Show all 8 references

http://www.vupen.com/english/advisories/2006/5091

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin