exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

CA Security Advisory 34876

CA Security Advisory 34876
Posted Dec 22, 2006
Authored by Ken Williams, Computer Associates | Site www3.ca.com

CAID 34876 - CA CleverPath Portal and other CA solutions that embed Portal technology contain a session verification vulnerability.

tags | advisory
SHA-256 | 0f54412beb75b544d797f6a6475238fc984c6235fe7678318bc1b6e2c236672c

CA Security Advisory 34876

Change Mirror Download

Title: CAID 34876: CA CleverPath Portal Session Inheritance
Vulnerability

CA Vulnerability ID (CAID): 34876

CA Advisory Date: 2006-12-19

Discovered By: CA customer and CA Technical Support

Impact: Remote attackers can potentially gain access to a user's
Portal session.

Summary: CA CleverPath Portal and other CA solutions that embed
Portal technology contain a session verification vulnerability.
In certain multiple Portal server configurations, a user who
connects through one Portal server could conceivably inherit the
Portal session and associated security authentication of a user
running on another Portal server.

Mitigating Factors: This problem only occurs when multiple Portal
servers are sharing a common data store, and two of the Portal
servers are started at exactly the same time. Typically, customers
deploy multiple Portal servers in this type of configuration to
utilize high-availability failover and load balancing. A multi
CleverPath Portal server environment is not a default deployment,
but it is an optional post installation configuration. None of the
CA solutions that embed the Portal technology install into this
scenario, or offer a multiple Portal server environment as a
configurable option. However, it is conceivable that a
knowledgeable administrator could have modified an embedded Portal
environment to leverage multiple Portal servers.

Severity: CA has given this vulnerability a Low risk rating.

Affected Products:
CleverPath Portal r4.51
CleverPath Portal r4.7
CleverPath Portal r4.71
BrightStor Portal r11.1
CleverPath Aion BPM r10
CleverPath Aion BPM r10.1
CleverPath Aion BPM r10.2
eTrust Security Command Center r1
eTrust Security Command Center r8
Unicenter Asset and Portfolio Management r11
Unicenter Database Management Portal r11
Unicenter Database Command Center r11.1
Unicenter Enterprise Job Manager r1 SP3
Unicenter Workload Control Center r1 SP4
Unicenter Management Portal r2.0
Unicenter Management Portal r3.1
Unicenter Management Portal r11.0

Affected platforms:
All supported operating systems (Windows, Linux, and supported
UNIX platforms).

Status and Recommendation:
The most prudent course of action for affected customers is to
download and apply the corrective maintenance. If the maintenance
cannot be applied right away, CA Technical Support recommends
implementing interim operational process controls to ensure, when
multiple Portal servers are sharing a common data store, that the
server start times are duly staggered by at least one minute.

Determining if you are affected:
Affected Portal installations must meet both of the following
criteria:
1) You are not at Portal maintenance version 4.71.001_179_060830
or higher. To determine your portal version:
a. Login as a Portal Administrator.
b. Choose "My Profile" from the upper right-hand portion of the
main workplace.
c. Click on the "Portal Administration" link.
d. The Portal version will be displayed in the right-hand pane
under Statistics.
2) You are running CA's Portal technology in a multi-server
environment. To determine if you are running a multi-server
environment:
a. Login as a Portal Administrator.
b. Choose "My Profile" from the upper right-hand portion of the
main workplace.
c. Click on the "Portal Administration" link.
d. If the "Jump to Portal" menu appears in the left Portal
Administration pane, you are using a multiple-server
environment. If you do not see the "Jump to Portal" section,
then Portal is not running in a multi-server environment and
is not affected by this vulnerability.
Note: refer to the SupportConnect Security Notice for additional
information.

References (URLs may wrap):
CA SupportConnect:
http://supportconnect.ca.com/
CA SupportConnect security notice for this vulnerability:
Important Security Notice for CA CleverPath and Embedded Portal
Customers
http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp
Solution Document Reference APARs:
Refer to the SupportConnect Security Notice.
CA Security Advisor posting:
CA CleverPath Portal Session Inheritance Vulnerability
http://www3.ca.com/securityadvisor/newsinfo/
CAID: 34876
CAID Advisory link:
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876
CVE Reference: CVE-2006-6641
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6641
OSVDB Reference: OSVDB-30854
http://osvdb.org/30854

Changelog for this advisory:
v1.0 - Initial Release

Customers who require additional information should contact CA
Technical Support at http://supportconnect.ca.com.

For technical questions or comments related to this advisory,
please send email to vuln@ca.com, or contact me directly.

If you discover a vulnerability in CA products, please report
your findings to vuln@ca.com, or utilize our "Submit a
Vulnerability" form.
URL: http://www3.ca.com/securityadvisor/vulninfo/submit.aspx


Regards,
Ken Williams ; 0xE2941985
Director, CA Vulnerability Research

CA, One CA Plaza. Islandia, NY 11749

Contact http://www3.ca.com/contact/
Legal Notice http://www3.ca.com/legal/
Privacy Policy http://www3.ca.com/privacy/
Copyright © 2006 CA. All rights reserved.
Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    0 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close