In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584).
CWE-732