Unrated severityNVD Advisory· Published Sep 13, 2006· Updated Apr 16, 2026
CVE-2006-4763
CVE-2006-4763
Description
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
Affected products
1- cpe:2.3:a:ibm:lotus_domino_web_access:7.0.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.htmlnvd
- securityreason.com/securityalert/1571nvd
- www-1.ibm.com/support/docview.wssnvd
- www.fishnetsecurity.com/csirt/disclosure/ibmnvd
- www.securityfocus.com/archive/1/445821/100/0/threadednvd
- www.securityfocus.com/bid/19966nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28881nvd
News mentions
0No linked articles in our index yet.