Unrated severityNVD Advisory· Published Sep 13, 2006· Updated Jun 16, 2026
CVE-2006-4763
CVE-2006-4763
Description
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:ibm:lotus_domino_web_access:7.0.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:lotus_domino_web_access:7.0.1:*:*:*:*:*:*:*
- (no CPE)range: = 7.0.1
Patches
Vulnerability mechanics
References
7- lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.htmlnvd
- securityreason.com/securityalert/1571nvd
- www-1.ibm.com/support/docview.wssnvd
- www.fishnetsecurity.com/csirt/disclosure/ibmnvd
- www.securityfocus.com/archive/1/445821/100/0/threadednvd
- www.securityfocus.com/bid/19966nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28881nvd
News mentions
0No linked articles in our index yet.