cPanel (UNKNOWN VERSION) - Addon Domain password logged in plain text during creation



DESCRIPTION


Creating an Addon Domain in cPanel resulted in the password for that domain (stored in the $password2 variable) being logged in plain text to /usr/local/cpanel/logs/access_log.



IMPACT


Minimal impact due to permissions on /usr/local/cpanel/logs/access_log being 0600, root.root.