{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:10d73abc-2b72-5615-aaec-c47f38375833",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-juli",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.78-tuxcare.2",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.78-tuxcare.2",
      "version": "8.5.78-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-juli",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.78",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "8.5.78"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2007-5342",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.78-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:76457fd0-5aa3-5c53-ad83-6f0feb9acf9a",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-5342 does not affect version 8.5.78-tuxcare.2 of org.apache.tomcat:tomcat-juli. not_affected \u2014 The target Apache Tomcat 8.5.78 is NOT AFFECTED by CVE-2007-5342. The vulnerable pattern (granting AllPermission to tomcat-juli.jar) is not present in the target repository. The fix was already included in the upstream Apache Tomcat 8.5.78 release that TuxCare onboarded. The catalina.policy file contains the proper restricted permissions for JULI logging, limiting file access to only the ${cata...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@8.5.78-tuxcare.2"
    }
  ]
}