{
  "@id": "urn:uuid:ed90ab0b-58c0-47cc-9508-5036e52602a2",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-15T21:00:24.821723+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T21:00:24.821723+00:00",
      "status_notes": "Vulnerability CVE-2023-44981 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper.",
      "vulnerability": {
        "name": "CVE-2023-44981"
      },
      "action_statement": "Vulnerability CVE-2023-44981 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-15T21:00:24.821723+00:00",
      "status_notes": "Vulnerability CVE-2024-23944 does not affect version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper. not_affected \u2014 Version 3.5.7 is NOT AFFECTED by CVE-2024-23944. The vulnerability requires the persistent watcher feature (addWatch command) introduced in ZooKeeper 3.6.0, which is absent in 3.5.7. While the underlying watch event delivery mechanism lacks ACL checks in 3.5.7 (same as vulnerable versions), the specific attack vector described in the CVE\u2014continuous monitoring via persistent watchers\u2014cannot be e...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-23944"
      },
      "impact_statement": "not_affected \u2014 Version 3.5.7 is NOT AFFECTED by CVE-2024-23944. The vulnerability requires the persistent watcher feature (addWatch command) introduced in ZooKeeper 3.6.0, which is absent in 3.5.7. While the underlying watch event delivery mechanism lacks ACL checks in 3.5.7 (same as vulnerable versions), the specific attack vector described in the CVE\u2014continuous monitoring via persistent watchers\u2014cannot be e..."
    }
  ]
}