cPanel (UNKNOWN VERSION) - Addon Domain password logged in plain text during creation

DESCRIPTION

Creating an Addon Domain in cPanel resulted in the password for that domain (stored in the $password2 variable) being logged in plain text to /usr/local/cpanel/logs/access_log.

IMPACT

Minimal impact due to permissions on /usr/local/cpanel/logs/access_log being 0600, root.root.