In cPanel prior to 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584).
cpanel cpanel