Puppet server

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could be used to force YA…CVE-2017-2295Puppet · 2.8% likely

   CWE-502

2. Race condition in Puppet Server 0.2.0 allows local users to obtain sensitive information by accessing it in between package installation or upgrade and the start of the service.CVE-2014-7170Puppet · 0.2% likely

   CWE-362

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.