In JetBrains TeamCity prior to 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.
jetbrains teamcity