cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).Referenceshttps://documentation.cpanel.net/display/CL/82+Change+Log
