{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8ae3be6d-29eb-56fe-8af5-9ba54ce535a9",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-juli",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.75-tuxcare.7",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.75-tuxcare.7",
      "version": "9.0.75-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-juli",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.75",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "9.0.75"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2007-5342",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.75-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:21162520-f968-594e-afdd-9a990b6945b8",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-5342 does not affect version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-juli. not_affected \u2014 CVE-2007-5342 is NOT AFFECTED in Tomcat 9.0.75-tuxcare.7. The vulnerability concerned overly broad security permissions (AllPermission) granted to the JULI logging component in catalina.policy, which allowed web applications to manipulate FileHandler configuration and write to arbitrary file system paths. The fix was applied by upstream Apache Tomcat in commit 52a88ae7a4 (December 2007) by Mark...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.75-tuxcare.7"
    }
  ]
}