cPanel prior to 68.0.27 allows arbitrary file-read operations via restore adminbin (SEC-349).
cpanel cpanel