Thycotic Secret Server

The Jenkins project announced an unresolved security vulnerability affecting the current version of this plugin (why?):

Missing permission check allows enumerating credentials IDs

Documentation for this plugin is here: https://github.com/jenkinsci/thycotic-secret-server-plugin