Puppet Mcollective vulnerabilities

• mcollective, debian linux, puppet marionette collective +1 more +3 more mcollective has a default password set at install CVE-2014-0175 9.8 CriticalDecember 13, 2019
• puppet mcollective, mcollective-sshkey-security +1 more The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier... CVE-2017-2298 6.5 MediumJune 30, 2017
• puppet mcollective, mcollective, puppet, puppet enterprise +1 more Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load,... CVE-2017-2292 Fix available 9.0 CriticalJune 30, 2017
• puppet mcollective-puppet-agent, mcollective-puppet-agent plugin +1 more On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non... CVE-2017-2290 8.8 HighMarch 3, 2017