High severity7.6OSV Advisory· Published Apr 10, 2024· Updated Jun 17, 2026

CVE-2024-2243

Description

A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can use the vulnerability to disclose the confidential Snyk authentication token and to run arbitrary commands on OSH workers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Csutils/CsmockOSV2 versions
csmock-1.0.0, csmock-1.0.1, csmock-1.0.2, …+ 1 more
- (no CPE)range: csmock-1.0.0, csmock-1.0.1, csmock-1.0.2, …
- cpe:2.3:a:csutils:csmock:*:*:*:*:*:*:*:*range: <3.5.3

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/CVE-2024-2243nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/I5MJC7U2ZKXUZWELQUJSN56WL5IM4MDR/nvd
lists.fedoraproject.org/archives/list/[email protected]/message/TIBNRL3LTG747DNWTBCPRSNRPKOBANMX/nvd
lists.fedoraproject.org/archives/list/[email protected]/message/X3HF6YTEGGW3SWB4V7JUVIRCXIBRHR7A/nvd

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000