Atlassian JIRA SEoL (3.13.x <= x <= 3.14.x)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(182235);
  script_version("1.0");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/09/29");

  script_name(english:"Atlassian JIRA SEoL (3.13.x <= x <= 3.14.x)");

  script_set_attribute(attribute:"synopsis", value:
"An unsupported version of Atlassian JIRA is installed on the remote host.");
  script_set_attribute(attribute:"description", value:
"According to its version, Atlassian JIRA is between 3.13.x and 3.14.x. It is, therefore, no longer maintained by its
vendor or provider.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may
contain security vulnerabilities.");
  # https://confluence.atlassian.com/jirakb/blog/2011/08/jira-3-13-end-of-life
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?f660a6ac");
  script_set_attribute(attribute:"solution", value:
"Upgrade to a version of Atlassian JIRA that is currently supported.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"manual");
  script_set_attribute(attribute:"cvss_score_rationale", value:"Tenable standard unsupported software score.");

  script_set_attribute(attribute:"plugin_publication_date", value:"2023/09/29");

  script_set_attribute(attribute:"plugin_type", value:"combined");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:atlassian:jira");
  script_set_attribute(attribute:"unsupported_by_vendor", value:"true");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("jira_detect.nasl", "atlassian_jira_win_installed.nbin", "atlassian_jira_nix_installed.nbin");
  script_require_keys("installed_sw/Atlassian JIRA");

  exit(0);
}

include('ucf.inc');

var app = 'Atlassian JIRA';

var app_info = vcf::combined_get_app_info(app:app);

vcf::check_all_backporting(app_info:app_info);

vcf::check_granularity(app_info:app_info, sig_segments:2);

var constraints = [
  { max_branch : '3.14', min_branch : '3.13', seol : 20110721 }
];

ucf::check_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);