CVE - CVE-2006-6641

CVE-ID
CVE-2006-6641	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:21681 URL:http://www.securityfocus.com/bid/21681 BUGTRAQ:20061221 [CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability URL:http://www.securityfocus.com/archive/1/455041/100/0/threaded CONFIRM:http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp CONFIRM:http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876 OSVDB:30854 URL:~~http://www.osvdb.org/30854~~ (Obsolete source) SECTRACK:1017429 URL:http://securitytracker.com/id?1017429 SECUNIA:23426 URL:http://secunia.com/advisories/23426 VUPEN:ADV-2006-5091 URL:~~http://www.vupen.com/english/advisories/2006/5091~~ (Obsolete source)
Assigning CNA
MITRE Corporation
Date Record Created
20061219	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20061219)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)