Plone SEoL (5.0.x)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(324741);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/07/02");

  script_name(english:"Plone SEoL (5.0.x)");

  script_set_attribute(attribute:"synopsis", value:
"An unsupported version of Plone is installed on the remote host.");
  script_set_attribute(attribute:"description", value:
"According to its version, Plone is 5.0.x. It is, therefore, no longer maintained by its vendor or provider.

Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may
contain security vulnerabilities.");
  script_set_attribute(attribute:"see_also", value:"https://plone.org/download/release-schedule");
  script_set_attribute(attribute:"see_also", value:"https://plone.org/security/historical-hotfixes-per-plone-version");
  script_set_attribute(attribute:"solution", value:
"Upgrade to a version of Plone that is currently supported.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_attribute(attribute:"risk_factor", value:"Low");

  script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/02");
  script_set_attribute(attribute:"seol_date", value:"2022/12/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:plone:plone");
  script_set_attribute(attribute:"unsupported_by_vendor", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("python_plone_detect.nbin");
  script_require_keys("installed_sw/plone");

  exit(0);
}

include('ucf.inc');

var app = 'plone';

var app_info = vcf::combined_get_app_info(app:app);

vcf::check_all_backporting(app_info:app_info);

vcf::check_granularity(app_info:app_info, sig_segments:2);

var constraints = [
  { branch : '5.0', seol : 20221212 }
];

ucf::check_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_NOTE);