CVE-2006-4763

ALTO 7.5CVE-2006-4763 · Published 13/09/2006 · updated 16/06/2026

In breve

CVE-2006-4763 è una vulnerabilità ALTO (CVSS 7.5) che riguarda lotus domino web access (ibm).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
lotus domino web access ibm	`= 7.0.1`	No fix yet

Description

IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.

References

lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html
securityreason.com/securityalert/1571
www-1.ibm.com/support/docview.wss
fishnetsecurity.com/csirt/disclosure/ibm
securityfocus.com/archive/1/445821/100/0/threaded
securityfocus.com/bid/19966
exchange.xforce.ibmcloud.com/vulnerabilities/28881

Altre vulnerabilità di lotus domino web access

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free