August pack of things: Security Vulnerabilities, VMware Expert 2021, VMworld 2021, and more

-
Critical Security Vulnerability
  1. Workspace One Access and vRealize Automation
    VMware has release a security notice VMSA-2021-0016 in regards to Workspace One Access (WOA) i.e VMware Identity Manager (vIDM) with a CVSSv3 base score of 8.6. It is encourage to apply the patch or workaround as soon as possible. This also applies to vRealize Automation that has embedded vIDM aka WOA.
  2. Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975)
    This is impacting vRealize Operations Manager which can be a standalone product, in VMware Cloud Foundation or vCloud Suite and deployed by vRealize Suite Lifecycle Manager. It has a CVSSv3 base score of 8.6 which is highly critical. This allows authenticated user via API to vROps the permission to write files directly locally to the underlying OS, Photon. 

VMware vExpert 2021 Second Half
Congrats to all new vExpert 2021 from Second Half announcement. It is not easy to have such a big community with everyone contributing without all these individual who have contributed one way or the other outside your day job.


VMworld 2021 Tracks
The tracks for VMworld 2021 is now gone live. If you have not register, do it now! You can start planning your tracks right away.

Comments

Post a Comment

Popular posts from this blog

Why VMware or Why Not after Broadcom?

-
The Truth Yes, the news of VMware acquired by Broadcom has come to a realization. We cannot denied the truth since 22nd Nov 2023. Prior the acquisition, if you have made a multi-year purchase before that, you will have whatever you can consume after the acquisition. VMware after the acquisition has release new bundle of all their offerings and end the perpetual licensing offer to the market. The individual products are not make available and cannot be purchase as a standalone. But are offered via two bundle namely; VMware vSphere Foundation (VVF), VMware Cloud Foundation (VCF). Both of which are all subscription licenses. It also ends all sales and renewal of any perpetual licenses. Honestly, VMware has been trying to end its perpetual license and into subscription for the longest time. With the Broadcom acquisition, VMware has been one of the last major player that has moved to subscription license. Customer who are on VMware, has been enjoying the great pricing with no limit of cores...
Read more

VMware Certifications Updates

-
Image
New changes are coming your ways for VMware certifications. A blog article just been release. 1. Prices of VCP, VCAP, etc. are all standardize to one single price, USD250. This is definitely beneficial for many especially those who are keen to persue the advanced level exam but having difficult to afford the exam fee which was much higher. 2. A mandatory course is no longer needed as an exam requirement. This will help many professionals who are experienced to get certified without having to go through boring course and spend to drag through the requirement.  Will this then bring down the certification value since course was required to ensure certified professional walk the talk as what they hold in credential? Answer to point 2, for people who are new and managed to pass the exam and get certified by other means, it can be identified easily. As the digital badges will be differentiated whether the exam was passed with a accompanied course or not. So during an interview, it can i...
Read more

VMware vExpert 2025 Applications Starts Now!

-
It the time of the year to apply and renew your vExpert for another year for your effort contribution back to the VMware community over the last 6-12months.  The vExpert 2025 application is now open starting from 6th Dec 2024 and will closed on 10th January 2025. So hurry start your application and fill up all your contribution. You do not have to do it once through, you can always save it in draft and add on and submit before the closing date. If you have doubt reach out or look for your vExpert Pro nearest to you to to advise you accordingly. This year has been a very different year for VMware. However, the vExpert program was valued and carry on. The perks this year been a vExpert will be very different from the investment from Broadcom.  Head over and sign up now. Good luck! Update 13 Dec 2024 Check out the vExpert application announcement here .
Read more