Computer Associates多个CleverPath Portal环境会话劫持漏洞

CleverPath Portal环境一般配置在多个Portal服务器共享一个通用数据存储时存在安全问题。这可导致通过其中一个Portal服务器连接的用户可继承Portal会话，关联另一个Portal服务器中的某个用户的安全验证。 当多个Portal服务器共享通用数据存储并两个Portal服务器在同一时间里启动，由于CleverPath Portal环境变量数据存在问题，可导致以其他用户权限访问服务程序。CleverPath Portal环境变量不是默认配置。 Computer Associates Unicenter Workload Control Center 1.0 SP4 Computer Associates Unicenter Management Portal 3.1 Computer Associates Unicenter Management Portal 2.0 Computer Associates Unicenter Management Portal 11.0 Computer Associates Unicenter Enterprise Job Manager 1.0 SP3 Computer Associates Unicenter Database Management Portal 11 Computer Associates Unicenter Database Command Center 11.1 Computer Associates Unicenter Asset Portfolio Management 11.0 Computer Associates eTrust Security Command Center r8 Computer Associates eTrust Security Command Center 1.0 Computer Associates CleverPath Portal 4.7 Computer Associates CleverPath Portal 4.71 Computer Associates CleverPath Portal 4.51 Computer Associates CleverPath Aion BPM 10.2 Computer Associates CleverPath Aion BPM 10.1 Computer Associates CleverPath Aion BPM 10 Computer Associates BrightStor Portal 11.1 升级程序： Computer Associates CleverPath Aion BPM 10.2 Computer Associates 4.71.001_180_060928_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.71/4.71.001_180_060928/4.71.001_180_0609" target="_blank">ftp://ftp.ca.com/pub/portal/4.71/4.71.001_180_060928/4.71.001_180_0609</a> 28_full.zip Computer Associates Unicenter Database Command Center 11.1 Computer Associates 4.7.001_143_061031_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.7/4.7.001_143_061031/4.7.001_143_061031_" target="_blank">ftp://ftp.ca.com/pub/portal/4.7/4.7.001_143_061031/4.7.001_143_061031_</a> full.zip Computer Associates Unicenter Enterprise Job Manager 1.0 SP3 Computer Associates 4.51.007_178_061023_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.51/4.51.007/4.51.007_178_061023/4.51.007" target="_blank">ftp://ftp.ca.com/pub/portal/4.51/4.51.007/4.51.007_178_061023/4.51.007</a> _178_061023_full.zip Computer Associates CleverPath Portal 4.71 Computer Associates 4.71.001_180_060928_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.71/4.71.001_180_060928/4.71.001_180_0609" target="_blank">ftp://ftp.ca.com/pub/portal/4.71/4.71.001_180_060928/4.71.001_180_0609</a> 28_full.zip Computer Associates Unicenter Database Management Portal 11 Computer Associates 4.51.007_178_061023_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.51/4.51.007/4.51.007_178_061023/4.51.007" target="_blank">ftp://ftp.ca.com/pub/portal/4.51/4.51.007/4.51.007_178_061023/4.51.007</a> _178_061023_full.zip Computer Associates CleverPath Aion BPM 10.1 Computer Associates 4.7.001_143_061031_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.7/4.7.001_143_061031/4.7.001_143_061031_" target="_blank">ftp://ftp.ca.com/pub/portal/4.7/4.7.001_143_061031/4.7.001_143_061031_</a> full.zip Computer Associates Unicenter Management Portal 11.0 Computer Associates 4.7.001_144_061115_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.7/4.7.001_144_061115/4.7.001_144_061115_" target="_blank">ftp://ftp.ca.com/pub/portal/4.7/4.7.001_144_061115/4.7.001_144_061115_</a> full.zip Computer Associates CleverPath Portal 4.51 Computer Associates 4.51.007_178_061023_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.51/4.51.007/4.51.007_178_061023/4.51.007" target="_blank">ftp://ftp.ca.com/pub/portal/4.51/4.51.007/4.51.007_178_061023/4.51.007</a> _178_061023_full.zip Computer Associates Unicenter Workload Control Center 1.0 SP4 Computer Associates 4.71.001_180_060928_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.71/4.71.001_180_060928/4.71.001_180_0609" target="_blank">ftp://ftp.ca.com/pub/portal/4.71/4.71.001_180_060928/4.71.001_180_0609</a> 28_full.zip Computer Associates Unicenter Asset Portfolio Management 11.0 Computer Associates 4.7.001_143_061031_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.7/4.7.001_143_061031/4.7.001_143_061031_" target="_blank">ftp://ftp.ca.com/pub/portal/4.7/4.7.001_143_061031/4.7.001_143_061031_</a> full.zip Computer Associates Unicenter Management Portal 2.0 Computer Associates 3.51.001_20061005_00.zip <a href="ftp://ftp.ca.com/pub/portal/3.51/3.51.001_20061005_00/3.51.001_2006100" target="_blank">ftp://ftp.ca.com/pub/portal/3.51/3.51.001_20061005_00/3.51.001_2006100</a> 5_00.zip Computer Associates Unicenter Management Portal 3.1 Computer Associates 4.51.007_181_061109_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.51/4.51.007/4.51.007_181_061109/4.51.007" target="_blank">ftp://ftp.ca.com/pub/portal/4.51/4.51.007/4.51.007_181_061109/4.51.007</a> _181_061109_full.zip Computer Associates CleverPath Portal 4.7 Computer Associates 4.7.001_143_061031_full.zip <a href="ftp://ftp.ca.com/pub/portal/4.7/4.7.001_143_061031/4.7.001_143_061031_" target="_blank">ftp://ftp.ca.com/pub/portal/4.7/4.7.001_143_061031/4.7.001_143_061031_</a> full.zip