cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores (SEC-311).Referenceshttps://documentation.cpanel.net/display/CL/68+Change+Log