Users with Overall/Read permission were able use the list-plugins CLI command and view the About Jenkins page to list all installed plugins. External References: https://jenkins.io/security/advisory/2018-05-09/
Created jenkins tracking bugs for this issue: Affects: fedora-all [bug 1576715]