{
  "@id": "urn:uuid:2ae18ee3-1756-4e0f-80f7-a3a0bbfefcc8",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 9,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-03T04:51:17.683972+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.activemq/artemis-commons@2.28.0-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.activemq/artemis-commons@2.28.0-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-03T04:51:17.683972+00:00",
      "status_notes": "Vulnerability CVE-2020-10727 does not affect version 2.28.0-tuxcare.1 of org.apache.activemq:artemis-commons. not_affected \u2014 Target is NOT AFFECTED. The vulnerable pattern (forced plaintext password storage in resetUser management API) was removed by upstream Apache fix commit ed7fee6d9c (March 4, 2020, by Justin Bertram). The fix adds a 'plaintext' boolean parameter to resetUser() that enables password hashing when set to false. This upstream fix was already present in Apache ActiveMQ Artemis 2.28.0 when TuxCare onb...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2020-10727"
      },
      "impact_statement": "not_affected \u2014 Target is NOT AFFECTED. The vulnerable pattern (forced plaintext password storage in resetUser management API) was removed by upstream Apache fix commit ed7fee6d9c (March 4, 2020, by Justin Bertram). The fix adds a 'plaintext' boolean parameter to resetUser() that enables password hashing when set to false. This upstream fix was already present in Apache ActiveMQ Artemis 2.28.0 when TuxCare onb..."
    }
  ]
}