CVE-2024-2243

Name of the Vulnerable Software and Affected Versions csmock (affected versions not specified)

Description A vulnerability was found in csmock where a regular user of the OSH service, with a valid Kerberos ticket, can disclose the confidential Snyk authentication token and run arbitrary commands on OSH workers. The issue can be exploited through a local network attack vector.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.