CVE-2021-3461

Summary

A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name].

Affected Software

VendorProductVersion RangeStatus
n/akeycloakrh-sso7-keycloak 9.0.13affected

Weaknesses

  • CWE-613: CWE-613

ADP Enrichment

CVE Program Container

Additional References

References