CVE-2024-21401

CriticalCVSS 9.8

Published: 13/02/2024(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.46%

71th percentile - higher than 71% of all known CVEs

Summary

Elevation of privilege vulnerability in the Microsoft Entra Jira Single-Sign-On plugin. It allows an attacker to elevate privileges in the Jira application.

Risk Assessment

An attacker could exploit this vulnerability to gain higher privileges in Jira, potentially leading to unauthorized access to data or configuration.

Recommendation

Update the Microsoft Entra Jira Single-Sign-On plugin to the latest version.

Original NVD description (English source)

Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability