[JENKINS-56905] Script-security plugin enable print password credentials without approbation

In pipeline job, it' s possible to invocate Jenkins.instance and parse globals credentials and print credentials password.

Need to deselect Use groovy Sandbox. User just need to have job/read/ job/build and Global/read.

script-security plugin in version 1.44 or above.

---
Originally reported by olivieratsncf, imported from: Script-security plugin enable print password credentials without approbation

• status: Open
  
• priority: Critical
  
• component(s): script-security-plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 1
  
• imported: 2025-12-09
  

Raw content of original issue

In pipeline job, it' s possible to invocate Jenkins.instance and parse globals credentials and print credentials password.


Need to deselect Use groovy Sandbox. User just need to have job/read/ job/build and Global/read.


script-security plugin in version 1.44 or above.

environment

```
Jenkins 2.107.3

script-security-plugin 1.44 or above
```