HarborGuard / CVE
Back to search
CRITICALCVE-2026-41103Published Modified CNA microsoft

CVE-2026-41103: Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability

Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.

Metrics

CVSS v3.1
9.1
Severity
CRITICAL
Fixed in
1.3.3
Affected Products
2

Fix available

1.3.37.4.0
Patch commits
Affected packages
  • Microsoft / Microsoft Confluence SAML SSO plugin
    < 7.4.0 (from 1.0.0)
  • Microsoft / Microsoft JIRA SAML SSO plugin
    < 1.3.3 (from 1.0.0)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
References