Insufficiently Protected Credentials
Jenkins BMC Release Package and Deployment Plugin stores credentials unencrypted in it's global configuration file com.bmc.rpd.jenkins.plugin.bmcrpd.configuration.RPDPluginConfiguration.xml on the Jenkins master where they can be viewed by users with access to the master file system.