cPanel 11.19.0-EDGE_20931 - resellers can overwrite the crt, key, and csr of the server's hostname
DESCRIPTION
Resellers were able to overwrite the crt, key, and csr of the server's hostname via "Generate a SSL Certificate and Signing Request".
IMPACT
Given sufficient access, man in the middle attacks could be possible.