Has anyone applied the LOG4SHELL mitigations for vCenter ?

[mbartle]

Here is the general advisory 

https://www.vmware.com/security/advisories/VMSA-2021-0028.html

Here are the vCenter 7.x appliance specific steps.

https://kb.vmware.com/s/article/87081?lang=en_US

Has anyone applied these yet ? Ideally I prefer to wait for an official patch from VMware

[lhedrick]

I ran both Pythion scripts on several 6.7.0U3p VCSA appliances. No issues...
https://kb.vmware.com/s/article/87081
and
https://kb.vmware.com/s/article/87088

There is now just a single script that needs to be run...

[stadi13]

@mbartleI implemented the workaround with the vc_log4j_mitigator.py which can be found here: https://kb.vmware.com/s/article/87081?lang=en_US

I implemented the workaround successfull on 19 vCenters until now. The script works very good. When you run it again in drymode (python vc_log4j_mitigator.py -r) you can check, if there are any vulnerable files left.

[stadi13]

@lhedrickThe KB https://kb.vmware.com/s/article/87088 is obsolete since 21.12.2021. There is a new script released and these steps integrated into https://kb.vmware.com/s/article/87081

[Alex_Romeo]

Hi,

Yes, I applied the workaround 5 days ago on 24 vCenter. I had no problems.

For now the solution is to apply the Python workaround. The fix is included in the next "minor release" of each vCenter release.

regards,

AR