Simon Sharwood / The Register:
VMware urges customers to immediately patch a critical arbitrary file upload vulnerability in its flagship vCenter and vSphere products — File upload vuln lets miscreants hijack vCenter Server — VMware has disclosed a critical bug in its flagship vSphere and vCenter products and urged users to drop everything and patch it.
