Path Disclosure Vulnerability in CA eTrust Security Command Center
CVE-2006-4899

Currently unrated

Key Information:

Vendor: Broadcom
Status: Etrust Security Command Center
Vendor: CVE Published:; 22 September 2006

What is CVE-2006-4899?

The ePPIServlet script in Computer Associates' eTrust Security Command Center versions 1.0 and r8 (up to SP1 CR2) exposes the web server path due to improper error handling. A remote attacker can exploit this vulnerability by inserting a single quote in the PIProfile function, leading to the disclosure of sensitive path information through an error message. This could potentially facilitate further attacks on the application or underlying systems.