Other weaknesses

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. Puppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist protection mechanism by leveraging the Puppet communications protocol.CVE-2015-7330Puppet · 2.1% likely

   CWE-254

2. A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query.CVE-2021-27021Puppet · 1.3% likely

   CWE-1027

3. Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mc…CVE-2014-3248Puppet · 0.5% likely

   CWE-17

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.