If a job has a password parameter, then this password parameter is included in the rebuild URL (e.g. https://.../hudson/job/SampleRebuild/buildWithParameters?USER=xxx&PASSWD=yyy) and is then available as plain text.