In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles
CWE-613