Authentication flaw

cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging SEC-107...