VULNERABILITY INTELLIGENCE
CVE-2006-4763
CVSS score7.5 HIGH
EPSS probability1.87%
CISA KEVNot currently listed
Published2006-09-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.