Launchpad.net

CVE 2014-0175

mcollective has a default password set at install

See the CVE page on Mitre.org for more details.