CVE-2018-12926: Exposure of Sensitive Information to an Unauthorized Actor

Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or default/log.lsp URI...