cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).
CVE Status: Modified
No CVSS data available
Exploit-db Github