{
  "@id": "urn:uuid:b3cae0c8-4fc5-4565-b785-5e9c68570ba7",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-04T03:58:00.094435+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.87-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.87-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T03:58:00.094435+00:00",
      "status_notes": "Vulnerability CVE-2007-5342 does not affect version 9.0.87-tuxcare.2 of org.apache.tomcat:tomcat-juli. not_affected \u2014 CVE-2007-5342 affects Apache Tomcat versions 5.5.9-5.5.25 and 6.0.0-6.0.15 where the default catalina.policy grants AllPermission to tomcat-juli.jar, allowing web applications to configure file handlers to write to arbitrary filesystem locations. The target repository (Apache Tomcat 9.0.87) already contains the upstream fix applied by Apache in 2007. The catalina.policy file at conf/catalina.po...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2007-5342"
      },
      "impact_statement": "not_affected \u2014 CVE-2007-5342 affects Apache Tomcat versions 5.5.9-5.5.25 and 6.0.0-6.0.15 where the default catalina.policy grants AllPermission to tomcat-juli.jar, allowing web applications to configure file handlers to write to arbitrary filesystem locations. The target repository (Apache Tomcat 9.0.87) already contains the upstream fix applied by Apache in 2007. The catalina.policy file at conf/catalina.po..."
    }
  ]
}