The below post contains list of products that are affected as well as the products that are not affected by Log4j vulnerability. BMC Team has come out with Fixes as well as mitigation for impacted On Premise products whereas as far non impacted products are concerned no action needs to be taken from the customer side.
List of Impacted BMC Products & their Fixes
| Product | Status | Patched? |
|---|---|---|
| BMC Discovery | Vulnerable | Fix Available |
| BMC Client Management | Vulnerable | Fix Available |
| Helix Data Manager | Vulnerable | Fix Available |
| Remedy Smart Reporting | Vulnerable | ETA for Fix: TBA |
| Control-M | Vulnerable | ETA for Fix: TBA on Dec 16, 2021 |
| TrueSight Automation for Networks | Vulnerable | Fix Available |
| TrueSight Server Automation | Vulnerable | ETA for Fix: Dec 20, 2021 |
| TrueSight Automation for Servers – Data Warehouse | Vulnerable | ETA for Fix: Dec 20, 2021 |
| Bladelogic Database Automation | Vulnerable | Fix Available |
| TrueSight Smart Reporting | Vulnerable | ETA for Fix: Dec 16, 2021 |
| TSOM Smart Reporting | Vulnerable | ETA for Fix: Dec 16, 2021 |
| Patrol for Sybase & Patrol for Linux KM | Vulnerable | Fix Available: Sybase Linux |
| TrueSight Automation Console | Vulnerable | ETA for Fix: Dec 23, 2021 |
| BMC Helix Continuous Optimization (REE) | Vulnerable | ETA for Fix: Dec 20, 2021 |
| TrueSight Operations Management: Infrastructure Management | Vulnerable | ETA for Fix: Dec 20, 2021 |
| TrueSight Operations Management: Presentation Server | Vulnerable | ETA for Fix: Dec 20, 2021 |
| TrueSight Operations Management: IT Data Analytics | Vulnerable | ETA for Fix: Dec 20, 2021 |
| TrueSight Operations Management: App Visibility Manager | Vulnerable | ETA for Fix: Dec 20, 2021 |
| BMC AMI Ops Insight | Vulnerable | Fix Available |
| BMC AMI Ops UI | Vulnerable | Fix Available – BP00494 |
| BMC AMI Ops Infrastructure (MVI) – CRA | Vulnerable | Fix Available |
| BMC AMI Ops Common Rest API (CRA) | Vulnerable | Fix Available |
| MainView Middleware Monitor | Vulnerable | ETA for Fix: Dec 21, 2021 |
| Partner KMs / ETL’s from Sentry Software (sentrysoftware.com) | Vulnerable | ETA for Fix: TBA |
To see which products versions are affected, click here (Not all the versions are affected only certain versions of the BMC product are affected)
List of Non-Impacted BMC products
- 3270 SUPEROPTIMIZER/CI
- 3270 SUPEROPTIMIZER/CICS
- Application Restart Control for Db2
- Application Restart Control for IMS
- Application Restart Control for VSAM
- BMC AMI Apptune for Db2
- BMC AMI Backup and Recovery for IMS
- BMC AMI Batch Optimizer
- BMC AMI Capacity Management
- BMC AMI Catalog Manager for Db2
- BMC AMI Catalog Manager for IMS
- BMC AMI Change Manager for Db2
- BMC AMI Change Manager for IMS
- BMC AMI Change Manager for IMS for DBCTL
- BMC AMI Change Manager for IMS TM
- BMC AMI Change Manager Virtual Terminal for IMS
- BMC AMI Check for Db2
- BMC AMI Command Center for Db2
- BMC AMI Command Center for Security
- BMC AMI Console management
- BMC AMI Copy for Db2
- BMC AMI Cost Management
- BMC AMI Data Packer for IMS
- BMC AMI Database Administration for Db2
- BMC AMI Database Advisor for IMS
- BMC AMI Database Integrity for IMS
- BMC AMI Database Performance for Db2
- BMC AMI Datastream for Ops
- BMC AMI Defender for Db2
- BMC AMI Defender for IMS
- BMC AMI Defender for McAfee DAM
- BMC AMI Defender for Ops Insight
- BMC AMI Defender for z/Linux
- BMC AMI Defender for z/OS
- BMC AMI Defender for z/OS GSIP Package
- BMC AMI Defender for z/VM
- BMC AMI Defender TCP/IP Receiver
- BMC AMI DevOps for Db2
- BMC AMI Energizer for IMS Connect
- BMC AMI Enterprise Connector
- BMC AMI Extended Terminal Assist for IMS
- BMC AMI Fast Path Indexer for IMS
- BMC AMI Fast Path Online Analyzer for IMS
- BMC AMI Fast Path Online Image Copy for IMS
- BMC AMI Fast Path Online Reorg for IMS
- BMC AMI Fast Path Online Restructure for IMS
- BMC AMI Fast Path Recovery for IMS
- BMC AMI Fast Path Restart for IMS
- BMC AMI Large Object Management for Db2
- BMC AMI Load for Db2
- BMC AMI LOBMaster for Db2
- BMC AMI Log Analyzer for IMS
- BMC AMI Log Master for Db2
- BMC AMI Message Advisor for IMS
- BMC AMI Online Reorg for IMS
- BMC AMI Ops Automation
- BMC AMI Ops Automation for Capping
- BMC AMI Ops for Networks
- BMC AMI Ops Monitor for CICS
- BMC AMI Ops Monitor for CMF
- BMC AMI Ops Monitor for Db2
- BMC AMI Ops Monitor for IMS Offline
- BMC AMI Ops Monitor for IMS Online
- BMC AMI Ops Monitor for JE
- BMC AMI Ops Monitor for MQ
- BMC AMI Ops Monitor for USS
- BMC AMI Ops Monitor for WAS
- BMC AMI Ops Monitor for z/OS
- BMC AMI Ops Monitor SYSPROG Services
- BMC AMI Partitioned Database Facility for IMS
- BMC AMI Pointer Checker for IMS
- BMC AMI Pool Advisor for Db2
- BMC AMI Recover for Db2
- BMC AMI Recovery for VSAM
- BMC AMI Recovery Manager for Db2
- BMC AMI Reorg For Db2
- BMC AMI Reorg for Db2
- BMC AMI Reorg for IMS
- BMC AMI Security Administrator
- BMC AMI Security Policy Manager
- BMC AMI Security Privileged Access Manager (also called BMC AMI Security Breakglass)
- BMC AMI Security Privileged Access Manager (BMC AMI Security Breakglass)
- BMC AMI Security Self Service Password Reset
- BMC AMI SQL Explorer for Db2
- BMC AMI SQL Performance for Db2
- BMC AMI Stats for Db2
- BMC AMI Storage
- BMC AMI Unload for Db2
- BMC AMI Utilities for Db2
- BMC AMI Utility Management for Db2
- BMC AMI Utility Manager for Db2
- BMC Application Accelerator for IMS
- BMC Check Plus for Db2
- BMC Client Gateway (Kaazing)
- BMC Compuware Abend-Aid
- BMC Compuware Application Audit
- BMC Compuware DevEnterprise
- BMC Compuware Enterprise Common Components (ECC)
- BMC Compuware Enterprise Services
- BMC Compuware Enterprise Services (CES)
- BMC Compuware File-AID Data Privacy
- BMC Compuware File-AID Data Solutions
- BMC Compuware File-AID for DB2
- BMC Compuware File-AID for IMS
- BMC Compuware File-AID/MVS
- BMC Compuware File-AID/RDX
- BMC Compuware Hiperstation ALL Product Offerings
- BMC Compuware ISPW
- BMC Compuware iStrobe
- BMC Compuware Program Analyzer
- BMC Compuware Storage Backup and Recovery
- BMC Compuware Storage Migration
- BMC Compuware Storage Performance
- BMC Compuware Strobe
- BMC Compuware ThruPut Manager
- BMC Compuware Topaz Connect (including NXPromote)
- BMC Compuware Topaz Enterprise Data
- BMC Compuware Topaz for Java Performance
- BMC Compuware Topaz for Total Test
- BMC Compuware Topaz Program Analysis
- BMC Compuware Topaz Workbench
- BMC Compuware Xpediter/CICS
- BMC Compuware Xpediter/Code Coverage
- BMC Compuware Xpediter/TSO and IMS
- BMC Compuware Xpediter/Xchange
- BMC Compuware zAdviser
- BMC COPE for IMS
- BMC DASD Manager for Db2
- BMC Db2 Plus Utilities
- BMC Defender Agent Configuration Manager
- BMC Defender Agent for SAP
- BMC Defender Agent for Unix/Linux
- BMC Defender Agent for Windows
- BMC Defender App for Splunk
- BMC Defender SIEM Correlation Server
- BMC Defender SIEM for Motorola
- BMC Defender SIEM for NNT
- BMC Defender SyslogDefender
- BMC Defender Windows Agent for Splunk
- BMC Digital Workplace Basic (DWP)
- BMC Digital Workplace Catalog (DWPC)
- BMC Helix Business Workflows
- BMC Helix Continuous Optimization – Agents
- BMC Helix Discovery
- BMC Helix Discovery Outpost
- BMC Helix ITSM (Below 21.x)
- BMC Helix Knowledge Management
- BMC Helix Platform
- BMC Helix Remedyforce
- BMC License Usage Collection Utility
- BMC LOADPLUS for Db2
- BMC MainView Vistapoint & Energizer
- BMC Opertune for DB2
- BMC Plus Utilities
- BMC Reorg Plus for Db2
- BMC Reorg Plus for Db2
- BMC Unload Plus for Db2
- Change Accumulation Plus
- CMDB
- Common Components: Next Generation Logger (NGL), Runtime Component System (RTCS), User Interface Middleware (UIM)
- Concurrent Reorg Facility
- Conditional Image Copy
- DASD Manager Plus for Db2
- Data Accelerator Compression
- DataTransfer tool (RSSO)
- Delta IMS DB/DC
- Delta IMS Virtual Terminal
- ExceptionReporter
- Extended Buffer Manager
- Fast Path Analyzer/EP
- Fast Path Reorg/EP
- Fast Reorg Facility
- Fast Reorg Facility/EP
- FASTCPK
- FATSCOPY
- FDR
- FDR/UPSTREAM
- FDRABR
- FDRERASE
- FDRMOVE
- FDRPAS
- FDRPASVM
- FDRREORG
- Footprints
- IAM
- Image Copy Plus
- LOADPLUS for IMS
- LOADPLUS/EP for IMS
- Local Copy Plus
- MainView Explorer
- MainView Middleware Administrator
- MainView Transaction Analyzer
- MAXM Reorg for IMS with Online/Defrag Feature
- MAXM Reorg/EP for IMS
- MAXM Reorg/EP for IMS with Online/Defrag Feature
- PATROL Agent
- PATROL Agent (TSOM & BHOM)
- PATROL Knowledge Modules – PATROL KM (except Sybase and Linux)
- Prefix Resolution Plus
- Prefix Update for IMS
- Recovery Advisor for IMS
- Recovery Manager for IMS
- Recovery Plus for IMS
- Release Process Management
- Remedy ITSM (IT Service Management)
- Resident Security Server
- RSSO Agent
- RSSO Auth Proxy
- RSSO Server
- Secondary Index Utility
- Secondary Index Utility/EP
- Snapshot Upgrade Feature
- Track-It!
- TrueSight Capacity Optimization
- TrueSight Capacity Optimization – Agents
- TrueSight Capacity Optimization – Agents
- TrueSight Orchestration
- TSCO For Mainframes
- ULTRAOPT/CICS
- ULTRAOPT/IMS
- UNLOAD PLUS for IMS
- UNLOAD PLUS/EP for IMS
- UXF for IMS (non product)
- VSAM Optimization
- zDetect