CVE-2021-3461: Red Hat Keycloak

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute [Name].

Affected products

• Red Hat Keycloak: version 9.0.13 only
• Red Hat Single Sign-On: version 7.0 only; version 7.4 only; version 7.4.7 only

Published 2022-04-01. Last modified 2026-06-17.