{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:54adf918-cbb6-52e2-ae48-8685e07cc89d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-juli",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.83-tuxcare.7",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.83-tuxcare.7",
      "version": "9.0.83-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-juli",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.83",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "9.0.83"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2007-5342",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.83-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:76fdd97b-a261-509b-a9e5-5bb7692c9f52",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-5342 does not affect version 9.0.83-tuxcare.7 of org.apache.tomcat:tomcat-juli. not_affected \u2014 CVE-2007-5342 is NOT present in Apache Tomcat 9.0.83. The vulnerability concerned overly permissive grants in catalina.policy that allowed web applications to use JULI logging APIs to write arbitrary files. The target's catalina.policy (lines 71-105) contains ONLY restricted permissions for tomcat-juli.jar, limiting file writes to ${catalina.base}/logs directory. The vulnerable AllPermission gr...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.83-tuxcare.7"
    }
  ]
}