cPanel prior to 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).
cpanel cpanel