CVE-2006-4763

IBM Lotus Domino Web Access DWA 7.0.1 does not expire a client's Lightweight Third-Party Authentication token LtpaToken upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie...

CVE-2006-4763

CVE-2006-4763 affects IBM Lotus Domino Web Access (DWA) 7.0.1, where the LtpaToken is not expired on logout. This can let an attacker intercept the LtpaToken cookie and gain the user’s privileges. Documented impact is that privileges can be obtained by token interception. The provided sources ide...

CVE-2006-4763

IBM Lotus Domino Web Access DWA 7.0.1 does not expire a client's Lightweight Third-Party Authentication token LtpaToken upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie...