{
  "@id": "urn:uuid:d84a58d4-13c9-45b4-a3bb-e3f2d27e7b71",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T16:05:28.850476+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.lucene/lucene-classification@7.7.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.lucene/lucene-classification@7.7.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-10T16:05:28.850476+00:00",
      "status_notes": "Vulnerability CVE-2024-45216 is a false positive for org.apache.lucene:lucene-classification 7.7.3-tuxcare.1. false_positive \u2014 Apache Solr CVE (PKIAuthenticationPlugin auth bypass); NVD lists only cpe:2.3:a:apache:solr and GHSA-mjvf-4h88-6xm3 lists only maven:org.apache.solr:solr. This project (lucene 7.7.3) builds and ships only org.apache.lucene:* artifacts from lucene/; the affected classes (PKIAuthenticationPlugin, HttpSolrCall) are only in solr/core and are not part of any Lucene artifact. Tracked against solr :: 7.7.3, VPV https://patchflow.corp.cloudlinux.com/vulnerability_project_versions/1971.",
      "vulnerability": {
        "name": "CVE-2024-45216"
      },
      "impact_statement": "false_positive \u2014 Apache Solr CVE (PKIAuthenticationPlugin auth bypass); NVD lists only cpe:2.3:a:apache:solr and GHSA-mjvf-4h88-6xm3 lists only maven:org.apache.solr:solr. This project (lucene 7.7.3) builds and ships only org.apache.lucene:* artifacts from lucene/; the affected classes (PKIAuthenticationPlugin, HttpSolrCall) are only in solr/core and are not part of any Lucene artifact. Tracked against solr :: 7.7.3, VPV https://patchflow.corp.cloudlinux.com/vulnerability_project_versions/1971."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.lucene/lucene-classification@7.7.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.lucene/lucene-classification@7.7.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-10T14:55:57.377397+00:00",
      "status_notes": "Vulnerability CVE-2024-45217 affects version 7.7.3-tuxcare.1 of org.apache.lucene:lucene-classification.",
      "vulnerability": {
        "name": "CVE-2024-45217"
      },
      "action_statement": "Vulnerability CVE-2024-45217 affects version 7.7.3-tuxcare.1 of org.apache.lucene:lucene-classification."
    }
  ]
}