{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:223fe9ac-1283-5adc-9d62-3415d88abafe",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-web-demo",
      "purl": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.3",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.3",
      "version": "6.1.6-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-web-demo",
            "purl": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2012-6551",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:274a73b1-792c-5096-be86-d23d06896078",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2012-6551 does not affect version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-web-demo. not_affected \u2014 CVE-2012-6551 affects Apache ActiveMQ before 5.8.0 where a sample web application is enabled by default, allowing DoS attacks via HTTP requests. The target (version 6.1.6-tuxcare.3) contains upstream vendor fixes from commits 437ea2f6e, 22bc55b94, and ced33d255 that remove the demo webapp from default configuration. These fixes shipped in the upstream 6.1.6 release prior to TuxCare onboarding (...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.3"
    }
  ]
}