cPanel prior to 74.0.0 allows certain file-read operations via password file caching (SEC-425).
cpanel cpanel