In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274).
CVE Status: Modified
No CVSS data available
Exploit-db Github