cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466).Referenceshttps://documentation.cpanel.net/display/CL/78+Change+Log
