In JetBrains TeamCity prior to 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions.
jetbrains teamcity