Vulnerabilities > CVE-2006-4763 - Unspecified vulnerability in IBM Lotus Domino web Access 7.0.1

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ibm
NVD
Published: 2006-09-13
Updated: 2024-11-21

Summary

IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.

Vulnerable Configurations

Part Description Count
Application
Ibm
1

References