CVE-2006-6641
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.
Key facts
- CVSS score
- 7.5 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P- EPSS score
- 2.6% (85th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2006-6624)
- Published
- December 20, 2006
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2006-6624 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- arcserve / brightstor
- broadcom / cleverpath portal
- cleverpath / aion bpm
- cleverpath / aion bpm
- cleverpath / aion bpm
- cleverpath / portal
- cleverpath / portal
- cleverpath / portal
- etrust / security command center
- etrust / security command center
- unicenter / asset and portfolio management
- unicenter / database command center
- unicenter / database management portal
- unicenter / enterprise job manager
- unicenter / management portal
- unicenter / management portal
- unicenter / management portal
- unicenter / workload control center
References
- http://secunia.com/advisories/23426
- http://securitytracker.com/id?1017429
- http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp(Vendor Advisory)
- http://www.osvdb.org/30854
- http://www.securityfocus.com/archive/1/455041/100/0/threaded
- http://www.securityfocus.com/bid/21681
- http://www.vupen.com/english/advisories/2006/5091
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain