Comment by sgustard

Is it a moral failing to be slow to update a Struts vulnerability? As an IT engineer that makes be nervous because I don't know which of a hundred actions I take or don't take in a given day will explode on me. Or was the moral failing to agree to build such a system in the first place?