cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).
mitre·CWE-358·Published 2019-08-01