CVE-2021-3461CWE-613

A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type…

published April 1, 2022

CVSS
—
EPSS
0%
Percentile
21.2
In the wild
Unconfirmed
What it is

A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name].

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00297 · 21.2th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2022-04-01T22:17Z
EPSS history
Timeline
  • 01 APR 22:17Z
    A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type…
    cvelistv5