In JetBrains TeamCity prior to 2023.05.2 a token with limited permissions could be used to gain full account access
jetbrains teamcity