CVE-2021-3461
01.04.2022, 23:15
A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name].Enginsight
| Vendor | Product | Version |
|---|---|---|
| redhat | keycloak | 9.0.13 |
| redhat | single_sign-on | 7.0 |
| redhat | single_sign-on | 7.4 |
| redhat | single_sign-on | 7.4.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration