{
  "@id": "urn:uuid:04a53374-ada8-4e85-acf3-002899faf80d",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-04T03:57:00.052799+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.4",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.4"
          }
        }
      ],
      "timestamp": "2026-11-04T03:57:00.052799+00:00",
      "status_notes": "Vulnerability CVE-2007-5342 does not affect version 9.0.90-tuxcare.4 of org.apache.tomcat:tomcat-juli. not_affected \u2014 CVE-2007-5342 affects Apache Tomcat 5.5.9-5.5.25 and 6.0.0-6.0.15 where catalina.policy grants AllPermission to JULI logging (tomcat-juli.jar), allowing web applications to exploit overly broad permissions to modify logging configuration and write files to arbitrary filesystem locations. The target version 9.0.90 already contains the upstream Apache fix from December 2007 (commit 52a88ae7a4) th...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2007-5342"
      },
      "impact_statement": "not_affected \u2014 CVE-2007-5342 affects Apache Tomcat 5.5.9-5.5.25 and 6.0.0-6.0.15 where catalina.policy grants AllPermission to JULI logging (tomcat-juli.jar), allowing web applications to exploit overly broad permissions to modify logging configuration and write files to arbitrary filesystem locations. The target version 9.0.90 already contains the upstream Apache fix from December 2007 (commit 52a88ae7a4) th..."
    }
  ]
}