Pharos Controls Devices Vulnerability: Unauthorized Access to Sensitive Information

CVE-2018-12926 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or default/log.lsp URI.

Learn more about our Web Application Penetration Testing UK.