In JetBrains TeamCity prior to 2020.2.1, a user could get access to the GitHub access token of another user.
jetbrains teamcity