We had do disable the Build Environment plugin: https://wiki.jenkins-ci.org/display/JENKINS/Build+Environment+Plugin

We have a parametrized build, one of the parameters is a 'password' type. Jenkins makes other efforts to not show the password in the log. However this plugin shows it plain as day when you click "Environment Variables"

If this is considered a valid issue, and it is fixed, We would like to know so we can re-enable the plug in