cPanel prior to 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558).
cpanel cpanel