cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534).Referenceshttps://documentation.cpanel.net/display/CL/82+Change+Log