Break out your emergency change process and patch this ransomware-friendly bug ASAP, says VMware

VMware has disclosed a critical bug in its flagship vSphere and vCenter products and urged users to drop everything and patch it. The virtualization giant also offered a workaround. The bug is one of 19 disclosed today by VMware. The worst of the bunch is CVE-2021-22005, described as "an arbitrary file upload vulnerability in …

[Paul Crawford]

Just using UNIX text editors can be a challenge

For Joe Blogs on the street, yes, but for your sysadmin? Really?

Closest to "Jesus wept" icon =>

[Captain Boing]

Re: Just using UNIX text editors can be a challenge

totally!

can't wear the label "Admin" if they can't grasp vi, ed, emacs etc. not on my watch.

[Anonymous Coward]

Re: Just using UNIX text editors can be a challenge

I tend to agree, nonetheless it does say VMware Admin, not Sysadmin - in many Enterprises there is considerable separation.

[DS999]

Re: Just using UNIX text editors can be a challenge

In most of the enterprises I've consulted at, the virtualization team is either part of the Windows team or branched off from it at some point, because ESX was mostly used at first to consolidate Windows servers.

So while you may wish VMware admins are more generalist I find many know nothing other than Windows. While they may have used 'vi' once or twice, if editing a text incorrectly is going to bring down an entire ESX farm you don't want them touching it...

[Scott 26]

Re: Just using UNIX text editors can be a challenge

> So while you may wish VMware admins are more generalist I find many know nothing other than Windows. While they may have used 'vi' once or twice, if editing a text incorrectly is going to bring down an entire ESX farm you don't want them touching it...

At my org, I find the windows guys have a wider breadth of knowledge than the eunuchs guys....

We have windows guys who can 'get by' in a shell, but their equivalent eunuchs are completely lost on a windows server....

[tfewster]

Re: Just using UNIX text editors can be a challenge

Downvoted not for your factual statement of how it is at your org, but for your org itself.

My anecdotal experience is that even Unix greybeards are capable of using a web or GUI interface, or taking appropriate care when using an unfamiliar editor such as edlin on MS-DOS.

[Pascal Monett]

"Even the least severe of the flaws [..] can lead to information leaks"

So basically VMware is currently leaking like a sieve.

Or is it more like a screen door on a submarine ?

[sanmigueelbeer]

While you are there ...

Might as well add this to the Emergency Change: September 2021 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication

One of them has a "perfect 10" score: Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability