[JENKINS-64209] System Credentials are Available in Run Parameter with Configure

When using the credentials plugin run parameter, system credentials are only populated if the user has configure access.  This is a significant security hole as, in order for a user to have access to pre-defined credentials, he must be able to alter the jobs configuration.

---
Originally reported by mbidewel, imported from: System Credentials are Available in Run Parameter with Configure

• status: Open
  
• priority: Major
  
• component(s): credentials-plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 1
  
• imported: 2025-12-08
  

Raw content of original issue

When using the credentials plugin run parameter, system credentials are only populated if the user has configure access.  This is a significant security hole as, in order for a user to have access to pre-defined credentials, he must be able to alter the jobs configuration.

• environment: Jenkins LTS