CVE-2021-3461

low

Published 2022-04-03 · Modified 2024-02-16

CVSS v3

—

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CVSS v2

—

VIR risk

2.5

Description

Keycloak insufficient session expiration

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

vendor Authored 2026-05-27

Vendor advisory: arch — https://security.archlinux.org/ASA-202106-19

OS	Version	Status	Fixed in
arch		fixed	`13.0.1-1`

Ecosystem	Package	Vulnerable	Fixed
Maven	org.keycloak:keycloak-parent	`<14.0.0`	`14.0.0`

Verify integrity in audit chain (admin only). AS-IS.