In cPanel prior to 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290).
cpanel cpanel