Information Disclosure

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.CVE-2015-6941Saltstack · 2.9% likely

   CWE-534

2. salt before 2015.5.5 leaks git usernames and passwords to the log.CVE-2015-6918Saltstack · 1.2% likely

   CWE-200

3. The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to l…CVE-2017-8109Saltstack · 0.4% likely

   CWE-200

4. The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.CVE-2015-8034Saltstack · 0.4% likely

   CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.