CodeMeter - WebAdmin Panel Access

What is "CodeMeter - WebAdmin Panel Access?"

The "CodeMeter - WebAdmin Panel Access" module is designed to detect the presence of the CodeMeter WebAdmin panel and assess its accessibility. CodeMeter is a software licensing and protection solution developed by Wibu-Systems. This module focuses on identifying any misconfigurations or vulnerabilities related to the WebAdmin panel.

This module has an informative severity level, which means it provides valuable information without indicating a critical security issue.

Impact

The impact of this module depends on the findings. If misconfigurations or vulnerabilities are detected in the CodeMeter WebAdmin panel, it could potentially lead to unauthorized access or compromise of the licensing and protection system. This may result in unauthorized usage of software licenses or the exposure of sensitive information.

How the module works?

The "CodeMeter - WebAdmin Panel Access" module works by sending HTTP requests to the target system and analyzing the responses. It uses specific matching conditions to identify the presence of the CodeMeter WebAdmin panel.

One of the matching conditions checks for the presence of the "Set-Cookie: CmWebAdminSession" header in the response, indicating that the WebAdmin panel is accessible. Additionally, the module checks if the response status code is either 301 or 302, which typically indicates a redirection to the WebAdmin panel.

By evaluating these matching conditions, the module determines whether the CodeMeter WebAdmin panel is accessible or not.

Here is an example of an HTTP request that the module may send:

GET / HTTP/1.1
Host: example.com
User-Agent: Vidoc-Scanner

If the matching conditions are met, the module reports the accessibility of the CodeMeter WebAdmin panel.