CVE-2006-4763
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party...
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
Exploit likelihood
What each source reports
NVD Score used
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
- Record
CVE-2006-4763- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
- Record
CVE-2006-4763- Updated
- 2026-11-02
EUVDEUVD-2006-4750 No score
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
- Record
EUVD-2006-4750- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hr6h-72x5-mmrx No score
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party...
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
- Record
GHSA-hr6h-72x5-mmrx- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4763 is a high vulnerability (CVSS 7.5) in Ibm Lotus Domino Web Access, published September 13, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.87%, the 79th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/28881
securityfocus.com/archive/1/445821/100/0/threaded
lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html
fishnetsecurity.com/csirt/disclosure/ibm
securityreason.com/securityalert/1571
www-1.ibm.com/support/docview.wss?rs=463&uid=swg21245589
nvd.nist.gov/vuln/detail/CVE-2006-4763
github.com/advisories/GHSA-hr6h-72x5-mmrx