{"id":"CVE-2021-3461","state":"PUBLISHED","title":"A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute ","description":"A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name].","publishedAt":"2022-04-01T22:17:45.000Z","updatedAt":"2024-08-03T16:53:17.756Z","severity":null,"assigner":"redhat","products":["n/a keycloak"],"affected":[{"vendor":"n/a","product":"keycloak","versions":[{"version":"rh-sso7-keycloak 9.0.13","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=1941565"],"weaknesses":["CWE-613"],"ingestedAt":"2026-10-29T19:48:55.807Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/3xxx/CVE-2021-3461.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-3461","state":"PUBLISHED","datePublished":"2022-04-01T22:17:45.000Z","dateUpdated":"2024-08-03T16:53:17.756Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2021-03-23T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name]."}],"affected":[{"vendor":"n/a","product":"keycloak","versions":[{"version":"rh-sso7-keycloak 9.0.13","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941565","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-613","description":"CWE-613","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2022-04-01T22:17:45.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2021-3461","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"keycloak","version":{"version_data":[{"version_value":"rh-sso7-keycloak 9.0.13"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name]."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-613"}]}]},"references":{"reference_data":[{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=1941565","refsource":"MISC","url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941565"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941565","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T16:53:17.756Z"}}]}}}