VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug

VMware by Broadcom has revealed a pair of critical-rated flaws in vCenter Server – the tool used to manage virtual machines and hosts in its flagship Cloud Foundation and vSphere suites. Announced late on Monday night, Pacific Time, the critical-rated flaws are CVE-2024-37079 and CVE-2024-37080, both of which scored 9.8 on the …

[Yorick Hunt]

Let me guess, fixes only available for customers on contract?

Seems like a very underhanded marketing ploy to me. "Sign up now, look at all the nasties we'll fix if you just sign your firstborn over to us!"

[sedregj]

"fixes only available for customers on contract?"

If you have a vCentre then you are on a subscription of some sort. I'm just waiting for Veeam to release Proxmox support and then off I trot.

[Anonymous Coward]

Might not be.

Mine is pirated. The keygen creates permanent keys, so permanent keys do exist.

[seven of five]

So from the net via vcenter into any VM?

Thats quite a holy grail...

[CowHorseFrog]

Who paid Matei from Romania to invest all this time to "check" for flaws ?

[Wzrd1]

"Who paid Matei from Romania to invest all this time to "check" for flaws ?"

The space aliens, of course!

Stupid questions get stupid answers, since it's a stupid game with a stupid prize.

[CowHorseFrog]

Why is it a stupid question ?

Why would someone invest months of effort looking at random products HOPING to MAYBE find a VULN...?

How about you actually answer the q instead of being an arsehole...writing insults.

[Wzrd1]

The most common VM software on the planet is now some random software, which by such a daffynition would be of minimal concern?

Why does anyone examine software for vulnerabilities with or without pay, obviously it's the space aliens, not out of interest in security.

Nanu nanu.