Puppet Agent

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow…CVE-2016-5713Puppet · 2.0% likely

   CWE-94

2. The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not properly validate server certificates, which might allow remote…CVE-2016-2786Puppet · 1.6% likely

   CWE-20

3. Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, and Puppet Agent 5.5.x prior to 5.5.2 on Windows only, with a specially crafted configuration file an atta…CVE-2018-6515Puppet · 0.8% likely

   CWE-20

4. In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which co…CVE-2018-6514Puppet · 0.8% likely

   CWE-426

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.