Description cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85). References https://documentation.cpanel.net/display/CL/54+Change+Log