{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e94af8df-829a-5680-97bb-fe086b79aae9",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-web-demo",
      "purl": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.8-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.8-tuxcare.2",
      "version": "6.1.8-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-web-demo",
            "purl": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.8",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.8"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2012-6551",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.8-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:778c777a-8eb8-5cd6-b657-b422587dd640",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6551 does not affect version 6.1.8-tuxcare.2 of org.apache.activemq:activemq-web-demo. not_affected \u2014 CVE-2012-6551: Target Apache ActiveMQ 6.1.8 is NOT AFFECTED. The vulnerability (demo web application enabled by default allowing DoS via resource exhaustion) was fixed in upstream Apache ActiveMQ 5.8.0 via commit 437ea2f6e (AMQ-4124). The fix removed the demo webapp from the default jetty.xml configuration, relocated demo files to webapps-demo/demo, and enabled authentication. This fix was alre...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.8-tuxcare.2"
    }
  ]
}