cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).

Published Oct 9, 2019 · Updated Aug 5, 2024 · Assigned by mitre