cPanel before 66.0.2 allows resellers to read other accounts domain log files (SEC-288).
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Cpanel | Cpanel | * | 66.0.2 (excluding) |
Potential Mitigations
References