CVE-2006-6641: Arcserve Brightstor

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server.

Affected products

• Arcserve Brightstor: version 11.1 only
• Broadcom Cleverpath Portal: up to and including 4.71
• Cleverpath Aion Bpm: version r10 only; version r10.1 only; version r10.2 only
• Cleverpath Portal: version r4.7 only; version r4.51 only; version r4.71 only
• Etrust Security Command Center: version r1 only; version r8 only
• Unicenter Asset And Portfolio Management: version r11 only
• Unicenter Database Command Center: version r11.1 only
• Unicenter Database Management Portal: version r11 only
• Unicenter Enterprise Job Manager: version r1_sp3 only
• Unicenter Management Portal: version r2.0 only; version r3.1 only; version r11.0 only
• Unicenter Workload Control Center: version r1_sp4 only

Published 2006-12-20. Last modified 2026-06-16.