In SaltStack Salt prior to 2016.3.6, compromised salt-minions can impersonate the salt-master.
saltstack salt