CVE-2026-41103CriticalCVSS 9.1
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.
🎯 Affected products2
- Microsoft Confluence SAML SSO plugin
- Microsoft JIRA SAML SSO plugin
✅ Remediation
KBRelease Notes (Security Update) — fixed build 1.3.3 KBRelease Notes (Security Update (Atlassian Marketplace)) — fixed build 1.3.3 KBRelease Notes (Security Update) — fixed build 7.4.0
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41103
- patchhttps://www.microsoft.com/download/details.aspx?id=56506
- referencehttps://learn.microsoft.com/en-us/entra/identity/saas-apps/jiramicrosoft-tutorial
- patchhttps://marketplace.atlassian.com/apps/1224430/microsoft-azure-active-directory-single-sign-on-for-jira?tab=overview&hosting=datacenter
- referencehttps://marketplace.atlassian.com/apps/1224430/com.microsoft.MicrosoftSsoJiraPlugin/version-history
- patchhttps://www.microsoft.com/download/details.aspx?id=56503
- referencehttps://learn.microsoft.com/en-us/entra/identity/saas-apps/confluencemicrosoft-tutorial