CVE:CVE-2006-6641
CNNVD:CNNVD-200612-444
CleverPath Portal是一个为员工、合作伙伴和客户进行个性化设置的电子商务工作环境。
CA CleverPath Portal和其他嵌入了Portal技术的CA解决方案中存在会话验证错误，远程攻击者可能利用此漏洞获取非授权访问。
在某些Portal服务器配置中，如果多个Portal服务器同时启动且共享同一数据存储的话，则通过一个Portal服务器连接的用户可以继承另一个Portal服务器上所运行用户的Portal会话和相关安全认证，获得非授权访问
solution:Upgrade arcserve brightstor to a higher version than 11.1,and avoid the version 11.1; Upgrade broadcom cleverpath_portal to a higher version than 4.71,and avoid the version (,4.71]; Upgrade cleverpath aion_bpm to a higher version than r10,r10.1,r10.2,and avoid the version r10,r10.1,r10.2; Upgrade cleverpath portal to a higher version than r4.7,r4.51,r4.71,and avoid the version r4.7,r4.51,r4.71; Upgrade etrust security_command_center to a higher version than r1,r8,and avoid the version r1,r8; Upgrade unicenter asset_and_portfolio_management to a higher version than r11,and avoid the version r11; Upgrade unicenter database_command_center to a higher version than r11.1,and avoid the version r11.1; Upgrade unicenter database_management_portal to a higher version than r11,and avoid the version r11; Upgrade unicenter enterprise_job_manager to a higher version than r1_sp3,and avoid the version r1_sp3; Upgrade unicenter management_portal to a higher version than r2.0,r3.1,r11.0,and avoid the version r2.0,r3.1,r11.0; Upgrade unicenter workload_control_center to a higher version than r1_sp4,and avoid the version r1_sp4